NVD

Id
31398  
Name
CVE-2014-3153  
Description
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-07  
Modified Date
2017-01-06  
Seq
2014-3153  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164381 31398 CVE-2014-3153 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e9c243a5a6de0be8e584c604d353412584b592f8  View
164382 31398 CVE-2014-3153 http://linux.oracle.com/errata/ELSA-2014-0771.html  View
164383 31398 CVE-2014-3153 http://linux.oracle.com/errata/ELSA-2014-3037.html  View
164384 31398 CVE-2014-3153 http://linux.oracle.com/errata/ELSA-2014-3038.html  View
164385 31398 CVE-2014-3153 http://linux.oracle.com/errata/ELSA-2014-3039.html  View
164386 31398 CVE-2014-3153 openSUSE-SU-2014:0878  View
164387 31398 CVE-2014-3153 SUSE-SU-2014:1316  View
164388 31398 CVE-2014-3153 SUSE-SU-2014:1319  View
164389 31398 CVE-2014-3153 [oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)  View
164390 31398 CVE-2014-3153 [oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153)  View
164391 31398 CVE-2014-3153 35370  View
164392 31398 CVE-2014-3153 [oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153)  View
164393 31398 CVE-2014-3153 67906  View
164394 31398 CVE-2014-3153 1030451  View
164395 31398 CVE-2014-3153 https://bugzilla.redhat.com/show_bug.cgi?id=1103626  View
164396 31398 CVE-2014-3153 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e  View
164397 31398 CVE-2014-3153 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339  View
164398 31398 CVE-2014-3153 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270  View
164399 31398 CVE-2014-3153 https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13910 JVNDB-2014-002785 Linux Kernel の kernel/futex.c の futex_requeue 関数における権限を取得される脆弱性 Linux Kernel の kernel/futex.c の futex_requeue 関数は、コールが二つの異なる futex のアドレスを持つことを確認しないため、権限を取得される脆弱性が存在します。 CVE-2014-3153 70440 CVE-2014-3153 31398 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002785.html 2014-06-05 2014-08-06 View