Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-0205

Опубликовано: 28 сент. 2014
Источник: ubuntu
Приоритет: high
CVSS2: 6.9

Описание

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.

РелизСтатусПримечание
devel

not-affected

4.2.0-16.19
esm-infra-legacy/trusty

not-affected

3.11.0-12.19
lucid

released

2.6.32-27.49
precise

not-affected

3.1.0-1.1
trusty

not-affected

3.11.0-12.19
trusty/esm

not-affected

3.11.0-12.19
upstream

released

2.6.37~rc1
utopic

not-affected

3.13.0-24.46
vivid

not-affected

3.16.0-23.31
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.2.0-1600.1
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

released

2.6.32-311.23
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-3.15
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

not-affected

3.4.0-3.10
vivid

not-affected

3.4.0-3.15
vivid/stable-phone-overlay

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-4.23
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

not-affected

3.4.0-3.14
vivid

not-affected

3.4.0-4.23
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

ignored

end of life
vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.5.0-18.29~precise1
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life, was needs-triage
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.11.0-13.20~precise2
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.13.0-24.46~precise1
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.16.0-25.33~14.04.2]]
lucid

DNE

precise

DNE

trusty

not-affected

3.16.0-25.33~14.04.2
trusty/esm

DNE

trusty was not-affected [3.16.0-25.33~14.04.2]
upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.19.0-18.18~14.04.1]]
lucid

DNE

precise

DNE

trusty

not-affected

3.19.0-18.18~14.04.1
trusty/esm

DNE

trusty was not-affected [3.19.0-18.18~14.04.1]
upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-5.34
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

not-affected

3.4.0-5.28
vivid

not-affected

3.4.0-5.34
vivid/stable-phone-overlay

not-affected

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-6.29
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

2.6.37~rc1
utopic

not-affected

3.4.0-6.25
vivid

not-affected

3.4.0-6.29
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

4.2.0-1014.21
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

released

4.2.0-1014.21
wily

not-affected

4.2.0-1008.12

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.0.0-1401.2
trusty

DNE

trusty/esm

DNE

upstream

released

2.6.37~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

6.9 Medium

CVSS2

Связанные уязвимости

redhat
почти 11 лет назад

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.

nvd
больше 10 лет назад

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.

debian
больше 10 лет назад

The futex_wait function in kernel/futex.c in the Linux kernel before 2 ...

github
около 3 лет назад

The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count.

oracle-oval
почти 11 лет назад

ELSA-2014-3073: unbreakable enterprise kernel security update (IMPORTANT)

6.9 Medium

CVSS2

Уязвимость CVE-2014-0205