NVD

Id
32638  
Name
CVE-2014-4699  
Description
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-07-09  
Modified Date
2014-08-01  
Seq
2014-4699  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171855 32638 CVE-2014-4699 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a  View
171856 32638 CVE-2014-4699 http://linux.oracle.com/errata/ELSA-2014-0924.html  View
171857 32638 CVE-2014-4699 http://linux.oracle.com/errata/ELSA-2014-3047.html  View
171858 32638 CVE-2014-4699 http://linux.oracle.com/errata/ELSA-2014-3048.html  View
171859 32638 CVE-2014-4699 [oss-security] 20140705 Re: CVE-2014-4699: Linux ptrace bug  View
171860 32638 CVE-2014-4699 [oss-security] 20140708 Re: CVE-2014-4699: Linux ptrace bug  View
171861 32638 CVE-2014-4699 [oss-security] 20140708 Re: CVE-2014-4699: Linux ptrace bug  View
171862 32638 CVE-2014-4699 http://packetstormsecurity.com/files/127573/Linux-Kernel-ptrace-sysret-Local-Privilege-Escalation.html  View
171863 32638 CVE-2014-4699 DSA-2972  View
171864 32638 CVE-2014-4699 34134  View
171865 32638 CVE-2014-4699 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.4  View
171866 32638 CVE-2014-4699 [oss-security] 20140704 CVE-2014-4699: Linux ptrace bug  View
171867 32638 CVE-2014-4699 USN-2266-1  View
171868 32638 CVE-2014-4699 USN-2267-1  View
171869 32638 CVE-2014-4699 USN-2268-1  View
171870 32638 CVE-2014-4699 USN-2269-1  View
171871 32638 CVE-2014-4699 USN-2270-1  View
171872 32638 CVE-2014-4699 USN-2271-1  View
171873 32638 CVE-2014-4699 USN-2272-1  View
171874 32638 CVE-2014-4699 USN-2273-1  View
171875 32638 CVE-2014-4699 USN-2274-1  View
171876 32638 CVE-2014-4699 https://bugzilla.redhat.com/show_bug.cgi?id=1115927  View
171877 32638 CVE-2014-4699 https://github.com/torvalds/linux/commit/b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a  View
171878 32638 CVE-2014-4699 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.47  View
171879 32638 CVE-2014-4699 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11  View
171880 32638 CVE-2014-4699 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.97  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14409 JVNDB-2014-003284 インテルプロセッサ上で稼動する Linux Kernel における競合状態を利用される脆弱性 インテルプロセッサ上で稼動する Linux Kernel は、IRET を使用しないシステムコールの場合、保存された RIP アドレスの非カノニカル値の使用を適切に制限しないため、競合状態を利用され、権限を取得される、またはサービス運用妨害 (二重フォールト) 状態にされる脆弱性が存在します。 CVE-2014-4699 71988 CVE-2014-4699 32638 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003284.html 2014-07-06 2014-08-06 View