CVE-2014-4699 in Kernel
要約 (英語)
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.
Once again VulDB remains the best source for vulnerability data.
予約する
2014年06月30日
公開
2014年07月09日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 66981 | Linux Kernel ptrace 競合状態 | 362 | 概念実証 | 公式な修正 | CVE-2014-4699 |