NVD

Id
35345  
Name
CVE-2014-8133  
Description
arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-17  
Modified Date
2016-12-23  
Seq
2014-8133  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181064 35345 CVE-2014-8133 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=41bdc78544b8a93a9c6814b8bbbfef966272abbe  View
181065 35345 CVE-2014-8133 openSUSE-SU-2015:0566  View
181066 35345 CVE-2014-8133 SUSE-SU-2015:0736  View
181067 35345 CVE-2014-8133 RHSA-2015:1272  View
181068 35345 CVE-2014-8133 DSA-3128  View
181069 35345 CVE-2014-8133 MDVSA-2015:058  View
181070 35345 CVE-2014-8133 [oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities  View
181071 35345 CVE-2014-8133 71684  View
181072 35345 CVE-2014-8133 USN-2490-1  View
181073 35345 CVE-2014-8133 USN-2491-1  View
181074 35345 CVE-2014-8133 USN-2492-1  View
181075 35345 CVE-2014-8133 USN-2493-1  View
181076 35345 CVE-2014-8133 USN-2515-1  View
181077 35345 CVE-2014-8133 USN-2516-1  View
181078 35345 CVE-2014-8133 USN-2517-1  View
181079 35345 CVE-2014-8133 USN-2518-1  View
181080 35345 CVE-2014-8133 https://bugzilla.redhat.com/show_bug.cgi?id=1172797  View
181081 35345 CVE-2014-8133 https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbe  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18394 JVNDB-2014-007269 Linux Kernel の Thread Local Storage の実装の arch/x86/kernel/tls.c における espfix 保護メカニズムを回避される脆弱性 Linux Kernel の Thread Local Storage (TLS) の実装の arch/x86/kernel/tls.c には、espfix 保護メカニズムを回避され、その結果、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-8133 75426 CVE-2014-8133 35345 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007269.html 2014-12-14 2014-12-19 View