CVE-2014-4508

Опубликовано: 23 июн. 2014

Источник: nvd

CVSS2: 4.7

EPSS Низкий

Описание

arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

Ссылки

http://article.gmane.org/gmane.linux.kernel/1726110
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2014/06/20/1
Mailing List
Third Party Advisory
http://secunia.com/advisories/58964
Third Party Advisory
http://secunia.com/advisories/60564
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/20/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/12/3
http://www.securityfocus.com/bid/68126
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2334-1
Third Party Advisory
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61
Vendor Advisory
http://article.gmane.org/gmane.linux.kernel/1726110
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2014/06/20/1
Mailing List
Third Party Advisory
http://secunia.com/advisories/58964
Third Party Advisory
http://secunia.com/advisories/60564
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/20/10
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 3.15.1 (включая)

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 12%

0.00043

Низкий

4.7 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2014-4508

ubuntu

почти 11 лет назад

CVE-2014-4508

CVSS3: 5.5

redhat

около 11 лет назад

CVE-2014-4508

debian

почти 11 лет назад

arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bi ...

GHSA-j8j3-qq6w-fxvv

github

около 3 лет назад

ELSA-2020-5934

oracle-oval

больше 4 лет назад

ELSA-2020-5934: kernel security update (IMPORTANT)

EPSS

Процентиль: 12%

0.00043

Низкий

4.7 Medium

CVSS2

Дефекты

CWE-189