Lucene search
GoogleOSV:DSA-2949-1HistoryJun 05, 2014 - 12:00 a.m.
linux - security update
2014-06-0500:00:00
Google
osv.dev
16
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
Several vulnerabilities have been discovered in the Linux kernel that
may lead to a denial of service or privilege escalation:
/ CVE-2014-3145
A local user can cause a denial of service (system crash) via
crafted BPF instructions.
- CVE-2014-3153
Pinkie Pie discovered an issue in the futex subsystem that allows a
local user to gain ring 0 control via the futex syscall. An
unprivileged user could use this flaw to crash the kernel (resulting
in denial of service) or for privilege escalation.
For the stable distribution (wheezy), these problems have been fixed in
version 3.2.57-3+deb7u2.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your linux packages.
References
Related
debian
debian
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2950-1] openssl security update
2014-06-05 11:51:34
threatpost
threatpost
Pinkie Pie Linux Kernel Patch Available
2014-06-06 13:40:34
Android Root Access Vulnerability Affecting Most Devices
2014-06-17 10:47:45
Google Play Hit With Rash of Auto-Rooting Malware
2016-06-28 12:29:57
nessus
nessus
Debian DSA-2949-1 : linux - security update
2014-06-06 00:00:00
Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-2262-1)
2014-06-28 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2251-1)
2014-06-20 00:00:00
openvas
openvas
Debian Security Advisory DSA 2949-1 (linux - security update)
2014-06-05 00:00:00
Debian: Security Advisory (DSA-2949-1)
2014-06-04 00:00:00
Ubuntu: Security Advisory (USN-2262-1)
2014-07-01 00:00:00
thn
thn
Linux Kernel Vulnerable to Privilege Escalation and DoS Attack
2014-06-07 00:29:00
Towelroot : One-Click Android Rooting Tool Released By Geohot
2014-06-17 22:49:00
Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware
2016-11-30 05:44:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-06-20 00:00:00
Linux kernel (EC2) vulnerabilities
2014-06-20 00:00:00
Linux kernel (Quantal HWE) vulnerabilities
2014-06-27 00:00:00
oraclelinux
oraclelinux
unbreakable enterprise kernel security update
2014-07-29 00:00:00
unbreakable enterprise kernel security update
2014-07-29 00:00:00
unbreakable enterprise kernel security update
2014-07-30 00:00:00
redhat
redhat
(RHSA-2014:0786) Important: kernel security, bug fix, and enhancement update
2014-06-24 00:00:00
(RHSA-2014:0913) Important: kernel-rt security update
2014-07-22 00:00:00
(RHSA-2014:0981) Important: kernel security, bug fix, and enhancement update
2014-07-29 00:00:00
freebsd
freebsd
cURL -- multiple vulnerabilities
2015-04-22 00:00:00
canvas
canvas
Immunity Canvas: LINUX_FUTEX_REQUEUE
2014-06-07 14:55:00
securityvulns
securityvulns
[oss-security] Linux kernel futex local privilege escalation (CVE-2014-3153)
2014-06-09 00:00:00
Linux privilege escalation
2014-06-09 00:00:00
packetstorm
packetstorm
Android Futex Requeue Kernel Exploit
2015-02-09 00:00:00
ubuntucve
ubuntucve
saint
saint
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-3153 Futex requeue exploit | Cloud Foundry
2014-08-18 00:00:00
zdt
zdt
Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit
2014-11-26 00:00:00
Android Futex Requeue Kernel Exploit
2015-02-10 00:00:00
attackerkb
attackerkb
CVE-2014-3153
2014-06-07 00:00:00
android
android
TowelRoot
2014-06-05 00:00:00
cve
cve
suse
suse
kernel: security and bugfix update (important)
2014-06-25 09:04:14
kernel update fixes local privilege escalation and a regression causing a crash if IPsec peer is unavailable (important)
2014-07-08 20:04:15
Security update for Linux Kernel (important)
2014-06-25 00:04:51
altlinux
altlinux
prion
prion
Command injection
2014-06-07 14:55:00
Design/Logic Flaw
2014-05-11 21:55:00
Integer overflow
2014-05-11 21:55:00
amazon
amazon
Medium: kernel
2014-06-15 16:30:00
Medium: kernel
2014-08-21 11:03:00
debiancve
debiancve
hackerone
hackerone
Sandbox Escape: Linux PI futex self-requeue bug
2014-05-26 05:00:49
cisa_kev
cisa_kev
Linux Kernel Privilege Escalation Vulnerability
2022-05-25 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:03:36
Information Disclosure
2019-05-02 05:03:36
Privilege Escalation
2019-05-02 05:03:36
exploitpack
exploitpack
Linux Kernel 3.14.5 (CentOS 7 RHEL) - libfutex Local Privilege Escalation
2014-11-25 00:00:00
metasploit
metasploit
Android 'Towelroot' Futex Requeue Kernel Exploit
2014-12-01 03:49:22
exploitdb
exploitdb
osv
osv
linux-2.6 - security update
2014-06-18 00:00:00
linux-2.6 - security update
2014-07-12 00:00:00
openssl - security update
2014-06-05 00:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2014-06-10 00:00:00
centos
centos
kernel, perf, python security update
2014-07-31 19:57:06
mageia
mageia
Updated kernel packages fixes security vulnerabilities.
2014-06-19 00:50:01
Updated kernel packages fixes security vulnerabilities
2014-06-23 01:13:23
securelist
securelist
Skygofree: Following in the footsteps of HackingTeam
2018-01-16 10:00:58
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related for OSV:DSA-2949-1