Debian Security Bug TrackerDEBIANCVE:CVE-2014-3534CVE-2014-3534
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 3.14.13-2 | linux_3.14.13-2_all.deb |
| Debian | 11 | all | linux | < 3.14.13-2 | linux_3.14.13-2_all.deb |
| Debian | 10 | all | linux | < 3.14.13-2 | linux_3.14.13-2_all.deb |
| Debian | 999 | all | linux | < 3.14.13-2 | linux_3.14.13-2_all.deb |
| Debian | 13 | all | linux | < 3.14.13-2 | linux_3.14.13-2_all.deb |
Related
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%