Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-4699

Опубликовано: 09 июл. 2014
Источник: ubuntu
Приоритет: high
EPSS Низкий
CVSS2: 6.9

Описание

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

РелизСтатусПримечание
devel

not-affected

4.2.0-16.19
esm-infra-legacy/trusty

not-affected

3.13.0-30.55
lucid

released

2.6.32-62.126
precise

released

3.2.0-65.99
saucy

released

3.11.0-24.42
trusty

released

3.13.0-30.55
trusty/esm

not-affected

3.13.0-30.55
upstream

released

3.16~rc4
utopic

not-affected

3.16.0-3.8
vivid

not-affected

3.16.0-23.31

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.2.0-1636.53
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

released

2.6.32-366.81
precise

DNE

saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-3.15
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

not-affected

3.4.0-3.15
vivid

not-affected

3.4.0-3.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-4.23
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

ignored

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

not-affected

3.4.0-4.23
vivid

not-affected

3.4.0-4.23

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

ignored

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

ignored

end of life
vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.5.0-52.79~precise1
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.8.0-42.63~precise1
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.11.0-24.42~precise1
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.13.0-30.55~precise1
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.16.0-25.33~14.04.2]]
lucid

DNE

precise

DNE

trusty

not-affected

3.16.0-25.33~14.04.2
trusty/esm

DNE

trusty was not-affected [3.16.0-25.33~14.04.2]
upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.19.0-18.18~14.04.1]]
lucid

DNE

precise

DNE

trusty

not-affected

3.19.0-18.18~14.04.1
trusty/esm

DNE

trusty was not-affected [3.19.0-18.18~14.04.1]
upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

ignored

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-5.34
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

ignored

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

not-affected

3.4.0-5.34
vivid

not-affected

3.4.0-5.34

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-6.29
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

saucy

ignored

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

3.16~rc4
utopic

not-affected

3.4.0-6.29
vivid

not-affected

3.4.0-6.29

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

ignored

end of life
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

4.2.0-1014.21
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

released

4.2.0-1014.21
wily

not-affected

4.2.0-1008.12

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.2.0-1451.71
saucy

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

3.16~rc4
utopic

DNE

vivid

DNE

Показывать по

EPSS

Процентиль: 76%
0.01001
Низкий

6.9 Medium

CVSS2

Связанные уязвимости

redhat
около 11 лет назад

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

nvd
около 11 лет назад

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

debian
около 11 лет назад

The Linux kernel before 3.15.4 on Intel processors does not properly r ...

github
больше 3 лет назад

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

fstec
около 11 лет назад

Уязвимость операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

EPSS

Процентиль: 76%
0.01001
Низкий

6.9 Medium

CVSS2