Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2666

Опубликовано: 27 мая 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 6.9

Описание

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

РелизСтатусПримечание
devel

not-affected

4.2.0-16.19
esm-infra-legacy/trusty

not-affected

3.13.0-51.84
lucid

not-affected

precise

not-affected

trusty

released

3.13.0-51.84
trusty/esm

not-affected

3.13.0-51.84
upstream

released

4.0~rc1
utopic

released

3.16.0-36.48
vivid

not-affected

3.19.0-13.13
vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

not-affected

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

not-affected

vivid

not-affected

vivid/stable-phone-overlay

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

not-affected

vivid

not-affected

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

ignored

end of life
vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life, was needs-triage
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

ignored

end of life, was pending
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

released

3.13.0-51.84~precise1
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [3.16.0-36.48~14.04.1]]
lucid

DNE

precise

DNE

trusty

released

3.16.0-36.48~14.04.1
trusty/esm

DNE

trusty was released [3.16.0-36.48~14.04.1]
upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.19.0-18.18~14.04.1]]
lucid

DNE

precise

DNE

trusty

not-affected

3.19.0-18.18~14.04.1
trusty/esm

DNE

trusty was not-affected [3.19.0-18.18~14.04.1]
upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

not-affected

vivid

not-affected

vivid/stable-phone-overlay

not-affected

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored]
lucid

DNE

precise

DNE

trusty

ignored

trusty/esm

DNE

trusty was ignored
upstream

released

4.0~rc1
utopic

not-affected

vivid

not-affected

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

ignored

end of life
trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

4.2.0-1014.21
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

released

4.2.0-1014.21
wily

not-affected

4.2.0-1008.12

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

trusty

DNE

trusty/esm

DNE

upstream

released

4.0~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

6.9 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

nvd
около 10 лет назад

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

debian
около 10 лет назад

Stack-based buffer overflow in the get_matching_model_microcode functi ...

github
около 3 лет назад

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.

oracle-oval
около 10 лет назад

ELSA-2015-1534: kernel security and bug fix update (MODERATE)

6.9 Medium

CVSS2