Lucene search
Copyright (C) 2022 Greenbone AGOPENVAS:13614125623111020150006HistoryJan 28, 2022 - 12:00 a.m.
Mageia: Security Advisory (MGASA-2015-0006)
2022-01-2800:00:00
Copyright (C) 2022 Greenbone AG
plugins.openvas.org
16
mageia
kernel
security
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
52.2%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.10.2015.0006");
script_cve_id("CVE-2014-8133", "CVE-2014-8134", "CVE-2014-9090", "CVE-2014-9322", "CVE-2014-9419", "CVE-2014-9420");
script_tag(name:"creation_date", value:"2022-01-28 10:58:44 +0000 (Fri, 28 Jan 2022)");
script_version("2024-02-02T05:06:09+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:09 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"7.2");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2014-12-17 17:41:59 +0000 (Wed, 17 Dec 2014)");
script_name("Mageia: Security Advisory (MGASA-2015-0006)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Mageia Linux Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/mageia_linux", "ssh/login/release", re:"ssh/login/release=MAGEIA4");
script_xref(name:"Advisory-ID", value:"MGASA-2015-0006");
script_xref(name:"URL", value:"https://advisories.mageia.org/MGASA-2015-0006.html");
script_xref(name:"URL", value:"https://bugs.mageia.org/show_bug.cgi?id=14884");
script_xref(name:"URL", value:"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.25");
script_xref(name:"URL", value:"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.26");
script_xref(name:"URL", value:"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.27");
script_tag(name:"summary", value:"The remote host is missing an update for the 'kernel, kernel-userspace-headers, kmod-broadcom-wl, kmod-fglrx, kmod-nvidia173, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons' package(s) announced via the MGASA-2015-0006 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This kernel update is based on upstream -longterm 3.14.27 and fixes the
following security issues:
arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in
the Linux kernel through 3.18.1 allows local users to bypass the espfix
protection mechanism, and consequently makes it easier for local users to
bypass the ASLR protection mechanism, via a crafted application that makes
a set_thread_area system call and later reads a 16-bit value (CVE-2014-8133).
The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel
through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels,
which makes it easier for guest OS users to bypass the ASLR protection
mechanism via a crafted application that reads a 16-bit value (CVE-2014-8134).
The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel
through 3.17.4 does not properly handle faults associated with the Stack
Segment (SS) segment register, which allows local users to cause a denial
of service (panic) via a modify_ldt system call, as demonstrated by
sigreturn_32 in the linux-clock-tests test suite (CVE-2014-9090).
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not
properly handle faults associated with the Stack Segment (SS) segment
register, which allows local users to gain privileges by triggering an
IRET instruction that leads to access to a GS Base address from the wrong
space (CVE-2014-9322).
On x86_64 Linux kernels a malicious user program can do a partial ASLR
bypass through TLS base addresses leak when attacking other programs
(CVE-2014-9419)
Linux kernel built with the iso9660 file system (CONFIG_ISO9660_FS) support
is vulnerable to an infinite recursion loop flaw, which could lead to a
crash or render a system unresponsive/unusable after a while. This occurs
while mounting an iso9660 image. An unprivileged user/process could use
this flaw to crash the system resulting in DoS (CVE-2014-9420).
For other fixes in this update, see the referenced changelogs.");
script_tag(name:"affected", value:"'kernel, kernel-userspace-headers, kmod-broadcom-wl, kmod-fglrx, kmod-nvidia173, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons' package(s) on Mageia 4.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "MAGEIA4") {
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-3.14.27-desktop-1.mga4", rpm:"broadcom-wl-kernel-3.14.27-desktop-1.mga4~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-3.14.27-desktop586-1.mga4", rpm:"broadcom-wl-kernel-3.14.27-desktop586-1.mga4~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-3.14.27-server-1.mga4", rpm:"broadcom-wl-kernel-3.14.27-server-1.mga4~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-desktop-latest", rpm:"broadcom-wl-kernel-desktop-latest~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-desktop586-latest", rpm:"broadcom-wl-kernel-desktop586-latest~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"broadcom-wl-kernel-server-latest", rpm:"broadcom-wl-kernel-server-latest~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"cpupower", rpm:"cpupower~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"cpupower-devel", rpm:"cpupower-devel~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-3.14.27-desktop-1.mga4", rpm:"fglrx-kernel-3.14.27-desktop-1.mga4~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-3.14.27-desktop586-1.mga4", rpm:"fglrx-kernel-3.14.27-desktop586-1.mga4~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-3.14.27-server-1.mga4", rpm:"fglrx-kernel-3.14.27-server-1.mga4~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-desktop-latest", rpm:"fglrx-kernel-desktop-latest~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-desktop586-latest", rpm:"fglrx-kernel-desktop586-latest~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"fglrx-kernel-server-latest", rpm:"fglrx-kernel-server-latest~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel", rpm:"kernel~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop-3.14.27-1.mga4", rpm:"kernel-desktop-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop-devel-3.14.27-1.mga4", rpm:"kernel-desktop-devel-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop-devel-latest", rpm:"kernel-desktop-devel-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop-latest", rpm:"kernel-desktop-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop586-3.14.27-1.mga4", rpm:"kernel-desktop586-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop586-devel-3.14.27-1.mga4", rpm:"kernel-desktop586-devel-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop586-devel-latest", rpm:"kernel-desktop586-devel-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-desktop586-latest", rpm:"kernel-desktop586-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-doc", rpm:"kernel-doc~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-server-3.14.27-1.mga4", rpm:"kernel-server-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-server-devel-3.14.27-1.mga4", rpm:"kernel-server-devel-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-server-devel-latest", rpm:"kernel-server-devel-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-server-latest", rpm:"kernel-server-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-source-3.14.27-1.mga4", rpm:"kernel-source-3.14.27-1.mga4~1~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-source-latest", rpm:"kernel-source-latest~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-userspace-headers", rpm:"kernel-userspace-headers~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-broadcom-wl", rpm:"kmod-broadcom-wl~6.30.223.141~44.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-fglrx", rpm:"kmod-fglrx~14.010.1006~14.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-nvidia173", rpm:"kmod-nvidia173~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-vboxadditions", rpm:"kmod-vboxadditions~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-virtualbox", rpm:"kmod-virtualbox~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kmod-xtables-addons", rpm:"kmod-xtables-addons~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-3.14.27-desktop-1.mga4", rpm:"nvidia173-kernel-3.14.27-desktop-1.mga4~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-3.14.27-desktop586-1.mga4", rpm:"nvidia173-kernel-3.14.27-desktop586-1.mga4~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-3.14.27-server-1.mga4", rpm:"nvidia173-kernel-3.14.27-server-1.mga4~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-desktop-latest", rpm:"nvidia173-kernel-desktop-latest~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-desktop586-latest", rpm:"nvidia173-kernel-desktop586-latest~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"nvidia173-kernel-server-latest", rpm:"nvidia173-kernel-server-latest~173.14.39~29.mga4.nonfree", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perf", rpm:"perf~3.14.27~1.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-3.14.27-desktop-1.mga4", rpm:"vboxadditions-kernel-3.14.27-desktop-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-3.14.27-desktop586-1.mga4", rpm:"vboxadditions-kernel-3.14.27-desktop586-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-3.14.27-server-1.mga4", rpm:"vboxadditions-kernel-3.14.27-server-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-desktop-latest", rpm:"vboxadditions-kernel-desktop-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-desktop586-latest", rpm:"vboxadditions-kernel-desktop586-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"vboxadditions-kernel-server-latest", rpm:"vboxadditions-kernel-server-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-3.14.27-desktop-1.mga4", rpm:"virtualbox-kernel-3.14.27-desktop-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-3.14.27-desktop586-1.mga4", rpm:"virtualbox-kernel-3.14.27-desktop586-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-3.14.27-server-1.mga4", rpm:"virtualbox-kernel-3.14.27-server-1.mga4~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-desktop-latest", rpm:"virtualbox-kernel-desktop-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-desktop586-latest", rpm:"virtualbox-kernel-desktop586-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"virtualbox-kernel-server-latest", rpm:"virtualbox-kernel-server-latest~4.3.20~3.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-3.14.27-desktop-1.mga4", rpm:"xtables-addons-kernel-3.14.27-desktop-1.mga4~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-3.14.27-desktop586-1.mga4", rpm:"xtables-addons-kernel-3.14.27-desktop586-1.mga4~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-3.14.27-server-1.mga4", rpm:"xtables-addons-kernel-3.14.27-server-1.mga4~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-desktop-latest", rpm:"xtables-addons-kernel-desktop-latest~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-desktop586-latest", rpm:"xtables-addons-kernel-desktop586-latest~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"xtables-addons-kernel-server-latest", rpm:"xtables-addons-kernel-server-latest~2.5~9.mga4", rls:"MAGEIA4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
mageia
mageia
Updated kernel packages fix security vulnerabilities
2015-01-07 18:14:58
Updated kernel-linus packages fix security vulnerabilities
2015-02-19 17:43:07
Updated kernel-vserver packages fix security vulnerabilities
2015-02-19 17:43:07
suse
suse
Security update for Linux kernel (important)
2014-12-24 08:05:54
kernel update for Evergreen 11.4 (important)
2014-12-31 11:06:28
Security update for Linux Kernel (important)
2014-12-21 13:12:48
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1698-1)
2021-06-09 00:00:00
SUSE: Security Advisory for Linux (SUSE-SU-2014:1698-1)
2015-10-16 00:00:00
Fedora Update for kernel FEDORA-2014-17293
2015-01-05 00:00:00
nessus
nessus
SUSE SLES11 Security Update : kernel (SUSE-SU-2014:1698-1)
2015-05-20 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2490-1)
2015-02-04 00:00:00
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2491-1)
2015-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: kernel-3.17.7-300.fc21
2014-12-22 02:32:48
[SECURITY] Fedora 21 Update: kernel-3.17.8-300.fc21
2015-01-11 02:58:06
[SECURITY] Fedora 21 Update: kernel-3.18.3-201.fc21
2015-01-26 02:31:22
ubuntu
ubuntu
Linux kernel vulnerabilities
2015-02-04 00:00:00
Linux kernel (EC2) vulnerabilities
2015-02-04 00:00:00
Linux kernel (OMAP4) vulnerabilities
2015-01-13 00:00:00
securityvulns
securityvulns
Linux kernel multiple security vulnerabilities
2015-01-18 00:00:00
[ MDVSA-2015:027 ] kernel
2015-01-18 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-06-10 00:00:00
Unbreakable Enterprise kernel security update
2015-06-10 00:00:00
Unbreakable Enterprise kernel security update
2015-06-10 00:00:00
osv
osv
linux-2.6 - security update
2015-02-18 00:00:00
linux - security update
2015-01-15 00:00:00
amazon
amazon
Medium: kernel
2014-12-03 22:27:00
debian
debian
[SECURITY] [DLA 155-1] linux-2.6 security update
2015-02-18 23:22:13
[SECURITY] [DSA 3128-1] linux security update
2015-01-15 06:41:29
[SECURITY] [DSA 3128-1] linux security update
2015-01-15 06:41:29
cvelist
cvelist
debiancve
debiancve
f5
f5
SOL16122 - Linux kernel vulnerability CVE-2014-9322
2015-02-12 00:00:00
K17543 : Linux kernel vulnerability CVE-2014-9420
2015-11-05 00:00:00
K17551 : Linux kernel vulnerability CVE-2014-9419
2015-11-06 00:00:00
redhat
redhat
(RHSA-2014:2008) Important: kernel security update
2014-12-17 00:00:00
(RHSA-2014:2009) Important: kernel security update
2014-12-17 00:00:00
(RHSA-2014:1998) Important: kernel-rt security update
2014-12-16 00:00:00
securelist
securelist
Hacking microcontroller firmware through a USB
2019-03-21 16:00:02
nvd
nvd
exploitpack
exploitpack
Linux Kernel - BadIRET Local Privilege Escalation
2017-07-24 00:00:00
Linux Kernel 3.17.5 - IRET Instruction #SS Fault Handling Crash (PoC)
2015-03-04 00:00:00
prion
prion
Design/Logic Flaw
2014-12-17 11:59:00
Design/Logic Flaw
2014-12-26 00:59:00
Default credentials
2014-11-30 01:59:00
cve
cve
ubuntucve
ubuntucve
veracode
veracode
Denial Of Service
2019-01-15 09:06:12
Information Disclosure
2019-05-02 05:29:38
Privilege Escalation
2019-01-15 09:03:32
centos
centos
kernel, perf, python security update
2014-12-18 17:17:29
kernel, perf, python security update
2015-06-10 09:06:44
kernel security update
2014-12-18 13:03:54
exploitdb
exploitdb
Linux Kernel 3.17.5 - IRET Instruction #SS Fault Handling Crash (PoC)
2015-03-04 00:00:00
Linux Kernel - 'BadIRET' Local Privilege Escalation
2017-07-24 00:00:00
android
android
CVE-2014-9322
2016-04-02 00:00:00
zdt
zdt
Linux Kernel IRET Instruction #SS Fault Handling - Crash PoC
2015-03-05 00:00:00
Linux Kernel - BadIRET Local Privilege Escalation Exploit
2018-03-01 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
52.2%
Related for OPENVAS:13614125623111020150006