NVD

Id
35118  
Name
CVE-2014-7825  
Description
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-11-10  
Modified Date
2017-01-06  
Seq
2014-7825  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179743 35118 CVE-2014-7825 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=086ba77a6db00ed858ff07451bedee197df868c9  View
179744 35118 CVE-2014-7825 RHSA-2014:1943  View
179745 35118 CVE-2014-7825 RHSA-2015:0290  View
179746 35118 CVE-2014-7825 [oss-security] 20141106 Exploitable issues in Linux perf/ftrace subsystems  View
179747 35118 CVE-2014-7825 70972  View
179748 35118 CVE-2014-7825 linux-kernel-cve20147825-dos(98557)  View
179749 35118 CVE-2014-7825 https://bugzilla.redhat.com/show_bug.cgi?id=1161565  View
179750 35118 CVE-2014-7825 https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16450 JVNDB-2014-005325 Linux Kernel の kernel/trace/trace_syscalls.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の kernel/trace/trace_syscalls.c は、perf サブシステムの使用中にプライベートなシステムコール番号を適切に処理しないため、サービス運用妨害 (out-of-bounds read および OOPS) の状態にされる、または ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-7825 75118 CVE-2014-7825 35118 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005325.html 2014-10-31 2015-05-12 View