CVE

Id
78870  
CVE No.
CVE-2015-1593  
Status
Candidate  
Description
The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.  
Phase
Assigned (20150213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
719067 78870 CVE-2015-1593 MLIST:[linux-kernel] 20150107 Re: [PATH] Fix stack randomization on x86_64 bit  View
719068 78870 CVE-2015-1593 URL:https://lkml.org/lkml/2015/1/7/811  View
719069 78870 CVE-2015-1593 MLIST:[oss-security] 20150213 Re: CVE-Request -- Linux ASLR integer overflow  View
719070 78870 CVE-2015-1593 URL:http://www.openwall.com/lists/oss-security/2015/02/13/13  View
719071 78870 CVE-2015-1593 MISC:http://hmarco.org/bugs/linux-ASLR-integer-overflow.html  View
719072 78870 CVE-2015-1593 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4e7c22d447bb6d7e37bfe39ff658486ae78e8d77  View
719073 78870 CVE-2015-1593 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1  View
719074 78870 CVE-2015-1593 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1192519  View
719075 78870 CVE-2015-1593 CONFIRM:https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77  View
719076 78870 CVE-2015-1593 DEBIAN:DSA-3170  View
719077 78870 CVE-2015-1593 URL:http://www.debian.org/security/2015/dsa-3170  View
719078 78870 CVE-2015-1593 SUSE:SUSE-SU-2015:0736  View
719079 78870 CVE-2015-1593 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html  View
719080 78870 CVE-2015-1593 SUSE:openSUSE-SU-2015:0714  View
719081 78870 CVE-2015-1593 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html  View
719082 78870 CVE-2015-1593 UBUNTU:USN-2560-1  View
719083 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2560-1  View
719084 78870 CVE-2015-1593 UBUNTU:USN-2561-1  View
719085 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2561-1  View
719086 78870 CVE-2015-1593 UBUNTU:USN-2562-1  View
719087 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2562-1  View
719088 78870 CVE-2015-1593 UBUNTU:USN-2563-1  View
719089 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2563-1  View
719090 78870 CVE-2015-1593 UBUNTU:USN-2564-1  View
719091 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2564-1  View
719092 78870 CVE-2015-1593 UBUNTU:USN-2565-1  View
719093 78870 CVE-2015-1593 URL:http://www.ubuntu.com/usn/USN-2565-1  View
719094 78870 CVE-2015-1593 BID:72607  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6945 JVNDB-2015-002265 複数の Microsoft Windows 製品における任意のコードを実行される 複数の Microsoft Windows 製品には、任意のコードを実行されるが存在します。 CVE-2015-1645 78870 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002265.html  View