NVD

Id
32191  
Name
CVE-2014-4157  
Description
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-23  
Modified Date
2014-06-25  
Seq
2014-4157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169234 32191 CVE-2014-4157 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=137f7df8cead00688524c82360930845396b8a21  View
169235 32191 CVE-2014-4157 [oss-security] 20140616 Re: Bug#751417: linux-image-3.2.0-4-5kc-malta: no SIGKILL after prctl(PR_SET_SECCOMP, 1, ...) on MIPS  View
169236 32191 CVE-2014-4157 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8  View
169237 32191 CVE-2014-4157 [oss-security] 20140617 Re: (Linux kernel) Bug#751417: linux-image-3.2.0-4-5kc-malta: no SIGKILL after prctl(PR_SET_SECCOMP, 1, ...) on MIPS  View
169238 32191 CVE-2014-4157 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751417  View
169239 32191 CVE-2014-4157 https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14143 JVNDB-2014-003018 MIPS プラットフォーム上で稼動する Linux kernel の arch/mips/include/asm/thread_info.h における PR_SET_SECCOMP 制限を回避される脆弱性 MIPS プラットフォーム上で稼動する Linux kernel の arch/mips/include/asm/thread_info.h は、高速のシステムコールのパスに _TIF_SECCOMP チェックを設定しないため、PR_SET_SECCOMP 制限を回避される脆弱性が存在します。 CVE-2014-4157 71445 CVE-2014-4157 32191 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003018.html 2014-06-16 2014-06-24 View