Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-3153
HistoryJun 05, 2014 - 12:00 a.m.

CVE-2014-3153

2014-06-0500:00:00
ubuntu.com
ubuntu.com
32
linux kernel
futex_requeue function
local users
privileges
crafted command
futex_requeue
unsafe waiter modification

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.008

Percentile

82.3%

JSON

The futex_requeue function in kernel/futex.c in the Linux kernel through
3.14.5 does not ensure that calls have two different futex addresses, which
allows local users to gain privileges via a crafted FUTEX_REQUEUE command
that facilitates unsafe waiter modification.

Bugs

Notes

Author Note
jdstrand android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-61.124UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-64.97UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-23.40UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-29.53UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1634.49UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-365.79UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-51.77~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-42.62~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-23.40~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-29.53~precise1UNKNOWN
Rows per page:
1-10 of 111

Related

android 1
openvas 57
zdt 2
saint 4
attackerkb 1
cve 1
prion 1
threatpost 6
altlinux 3
amazon 2
cvelist 1
debiancve 1
packetstorm 1
nessus 38
securityvulns 2
canvas 1
ubuntu 10
cloudfoundry 1
oraclelinux 6
exploitpack 1
suse 10
exploitdb 1
metasploit 1
cisa_kev 1
thn 5
nvd 1
hackerone 1
chrome 1
osv 5
redhat 6
mageia 8
debian 3
securelist 1
centos 1
veracode 7
kitploit 1
fedora 6
android
android
TowelRoot
2014-06-05 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-3038)
2015-10-06 00:00:00
Oracle: Security Advisory (ELSA-2014-3037)
2015-10-06 00:00:00
SUSE: Security Advisory for Linux (SUSE-SU-2014:0837-1)
2015-10-16 00:00:00
zdt
zdt
Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit
2014-11-26 00:00:00
Android Futex Requeue Kernel Exploit
2015-02-10 00:00:00
saint
saint
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
attackerkb
attackerkb
CVE-2014-3153
2014-06-07 00:00:00
cve
cve
CVE-2014-3153
2014-06-07 14:55:27
prion
prion
Command injection
2014-06-07 14:55:00
threatpost
threatpost
Android Ransomware Attacks Using Towelroot, Hacking Team Exploits
2016-04-25 15:36:33
CopyCat Malware Infected 14M Android Devices, Rooted 8M, in 2016
2017-07-06 13:49:02
Android Root Access Vulnerability Affecting Most Devices
2014-06-17 10:47:45
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-un-def version 1:3.14.5-alt2
2014-06-06 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt23
2014-06-09 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2014-06-21 00:00:00
amazon
amazon
Medium: kernel
2014-06-15 16:30:00
Medium: kernel
2014-08-21 11:03:00
cvelist
cvelist
CVE-2014-3153
2014-06-07 14:00:00
debiancve
debiancve
CVE-2014-3153
2014-06-07 14:55:27
packetstorm
packetstorm
Android Futex Requeue Kernel Exploit
2015-02-09 00:00:00
nessus
nessus
Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3037)
2014-06-09 00:00:00
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3038)
2014-06-09 00:00:00
Amazon Linux AMI : kernel (ALAS-2014-363)
2014-10-12 00:00:00
securityvulns
securityvulns
[oss-security] Linux kernel futex local privilege escalation &#40;CVE-2014-3153&#41;
2014-06-09 00:00:00
Linux privilege escalation
2014-06-09 00:00:00
canvas
canvas
Immunity Canvas: LINUX_FUTEX_REQUEUE
2014-06-07 14:55:00
ubuntu
ubuntu
Linux kernel (Quantal HWE) vulnerability
2014-06-05 00:00:00
Linux kernel (Raring HWE) vulnerabilities
2014-06-05 00:00:00
Linux kernel (OMAP4) vulnerabilities
2014-06-05 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-3153 Futex requeue exploit | Cloud Foundry
2014-08-18 00:00:00
oraclelinux
oraclelinux
unbreakable enterprise kernel security update
2014-06-07 00:00:00
Unbreakable Enterprise kernel security update
2014-06-07 00:00:00
Unbreakable Enterprise kernel security update
2014-06-06 00:00:00
exploitpack
exploitpack
Linux Kernel 3.14.5 (CentOS 7 RHEL) - libfutex Local Privilege Escalation
2014-11-25 00:00:00
suse
suse
Security update for Linux Kernel (important)
2014-06-14 02:04:20
Security update for Linux Kernel (important)
2014-06-24 20:04:13
Security update for Linux Kernel (important)
2014-06-25 00:04:51
exploitdb
exploitdb
Linux Kernel 3.14.5 (CentOS 7 / RHEL) - &#039;libfutex&#039; Local Privilege Escalation
2014-11-25 00:00:00
metasploit
metasploit
Android 'Towelroot' Futex Requeue Kernel Exploit
2014-12-01 03:49:22
cisa_kev
cisa_kev
Linux Kernel Privilege Escalation Vulnerability
2022-05-25 00:00:00
thn
thn
Towelroot : One-Click Android Rooting Tool Released By Geohot
2014-06-17 22:49:00
Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware
2016-11-30 05:44:00
CopyCat Android Rooting Malware Infected 14 Million Devices
2017-07-06 05:17:00
nvd
nvd
CVE-2014-3153
2014-06-07 14:55:27
hackerone
hackerone
Sandbox Escape: Linux PI futex self-requeue bug
2014-05-26 05:00:49
chrome
chrome
Stable Channel Update for Chrome OS
2014-06-10 00:00:00
osv
osv
linux-2.6 - security update
2014-06-18 00:00:00
linux - security update
2014-06-05 00:00:00
openssl - security update
2014-06-05 00:00:00
redhat
redhat
(RHSA-2014:0900) Important: kernel security and bug fix update
2014-07-17 00:00:00
(RHSA-2014:0800) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0771) Important: kernel security and bug fix update
2014-06-19 00:00:00
mageia
mageia
Updated kernel packages fixes security vulnerabilities.
2014-06-19 00:50:01
Updated kernel packages fixes security vulnerabilities
2014-06-23 01:13:23
Updated kernel-vserver package fixes security vulnerabilities
2014-08-18 13:14:56
debian
debian
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2950-1] openssl security update
2014-06-05 11:51:34
securelist
securelist
Skygofree: Following in the footsteps of HackingTeam
2018-01-16 10:00:58
centos
centos
kernel, perf, python security update
2014-06-20 10:10:41
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:36
Denial Of Service (DoS)
2019-05-02 05:03:36
Denial Of Service (DoS)
2019-05-02 05:03:37
kitploit
kitploit
Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework
2017-11-04 13:30:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10
[SECURITY] Fedora 20 Update: kernel-3.14.8-200.fc20
2014-06-18 22:25:48
[SECURITY] Fedora 20 Update: kernel-3.15.4-200.fc20
2014-07-11 02:02:48

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.008

Percentile

82.3%

JSON
Related for UB:CVE-2014-3153
android1openvas57zdt2saint4attackerkb1cve1prion1threatpost6altlinux3amazon2cvelist1debiancve1packetstorm1nessus38securityvulns2canvas1ubuntu10cloudfoundry1oraclelinux6exploitpack1suse10exploitdb1metasploit1cisa_kev1thn5nvd1hackerone1chrome1osv5redhat6mageia8debian3securelist1centos1veracode7kitploit1fedora6