NVD

Id
36237  
Name
CVE-2014-9585  
Description
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-09  
Modified Date
2017-01-02  
Seq
2014-9585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185129 36237 CVE-2014-9585 http://git.kernel.org/?p=linux/kernel/git/luto/linux.git;a=commit;h=bc3b94c31d65e761ddfe150d02932c65971b74e2  View
185130 36237 CVE-2014-9585 http://git.kernel.org/?p=linux/kernel/git/tip/tip.git;a=commit;h=fbe1bf140671619508dfa575d74a185ae53c5dbb  View
185131 36237 CVE-2014-9585 FEDORA-2015-0937  View
185132 36237 CVE-2014-9585 SUSE-SU-2015:0178  View
185133 36237 CVE-2014-9585 SUSE-SU-2015:0481  View
185134 36237 CVE-2014-9585 openSUSE-SU-2015:0566  View
185135 36237 CVE-2014-9585 SUSE-SU-2015:0652  View
185136 36237 CVE-2014-9585 openSUSE-SU-2015:0714  View
185137 36237 CVE-2014-9585 SUSE-SU-2015:0736  View
185138 36237 CVE-2014-9585 RHSA-2015:1778  View
185139 36237 CVE-2014-9585 RHSA-2015:1787  View
185140 36237 CVE-2014-9585 http://v0ids3curity.blogspot.in/2014/12/return-to-vdso-using-elf-auxiliary.html  View
185141 36237 CVE-2014-9585 DSA-3170  View
185142 36237 CVE-2014-9585 MDVSA-2015:058  View
185143 36237 CVE-2014-9585 [oss-security] 20141209 PIE bypass using VDSO ASLR weakness  View
185144 36237 CVE-2014-9585 [oss-security] 20150109 Re: PIE bypass using VDSO ASLR weakness - Linux kernel  View
185145 36237 CVE-2014-9585 71990  View
185146 36237 CVE-2014-9585 USN-2513-1  View
185147 36237 CVE-2014-9585 USN-2514-1  View
185148 36237 CVE-2014-9585 USN-2515-1  View
185149 36237 CVE-2014-9585 USN-2516-1  View
185150 36237 CVE-2014-9585 USN-2517-1  View
185151 36237 CVE-2014-9585 USN-2518-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18708 JVNDB-2014-007583 Linux Kernel の arch/x86/vdso/vma.c 内の vdso_addr 関数における ASLR 保護メカニズムを回避される脆弱性 Linux Kernel の arch/x86/vdso/vma.c 内の vdso_addr 関数は、vDSO エリア用のメモリ領域を適切に選択しないため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-9585 76878 CVE-2014-9585 36237 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007583.html 2014-12-21 2015-01-15 View