cvelistv5 - cve-2014-8133

CVE-2014-8133 (GCVE-0-2014-8133)

Vulnerability from cvelistv5

Published

2014-12-17 11:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value.

References

URL

Tags

	http://www.ubuntu.com/usn/USN-2515-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1172797	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2491-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2490-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2492-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=41bdc78544b8a93a9c6814b8bbbfef966272abbe	x_refsource_CONFIRM
	http://secunia.com/advisories/62801	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/71684	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2518-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:058	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2493-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2517-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2015/dsa-3128	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2516-1	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbe	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1272.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2014/12/15/6	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.891Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2515-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2515-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1172797"
          },
          {
            "name": "USN-2491-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2491-1"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2490-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2490-1"
          },
          {
            "name": "USN-2492-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2492-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=41bdc78544b8a93a9c6814b8bbbfef966272abbe"
          },
          {
            "name": "62801",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62801"
          },
          {
            "name": "71684",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71684"
          },
          {
            "name": "USN-2518-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2518-1"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "USN-2493-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2493-1"
          },
          {
            "name": "USN-2517-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2517-1"
          },
          {
            "name": "DSA-3128",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3128"
          },
          {
            "name": "USN-2516-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2516-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbe"
          },
          {
            "name": "RHSA-2015:1272",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
          },
          {
            "name": "[oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/12/15/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-22T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2515-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2515-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1172797"
        },
        {
          "name": "USN-2491-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2491-1"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2490-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2490-1"
        },
        {
          "name": "USN-2492-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2492-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=41bdc78544b8a93a9c6814b8bbbfef966272abbe"
        },
        {
          "name": "62801",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62801"
        },
        {
          "name": "71684",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71684"
        },
        {
          "name": "USN-2518-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2518-1"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "USN-2493-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2493-1"
        },
        {
          "name": "USN-2517-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2517-1"
        },
        {
          "name": "DSA-3128",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3128"
        },
        {
          "name": "USN-2516-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2516-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbe"
        },
        {
          "name": "RHSA-2015:1272",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
        },
        {
          "name": "[oss-security] 20141215 Linux kernel: multiple x86_64 vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/12/15/6"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8133",
    "datePublished": "2014-12-17T11:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTFR-2015-AVI-359

Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Fedora. Elles permettent à un attaquant de provoquer un déni de service, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Noyau Linux de Fedora versions inférieures à 4.1.5-100.fc21

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Fedora-2015-13391 du 19 août 2015

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eNoyau Linux de Fedora versions inf\u00e9rieures \u00e0  4.1.5-100.fc21\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-9090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9090"
    },
    {
      "name": "CVE-2014-9585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9585"
    },
    {
      "name": "CVE-2015-3290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3290"
    },
    {
      "name": "CVE-2014-8159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8159"
    },
    {
      "name": "CVE-2015-3339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3339"
    },
    {
      "name": "CVE-2015-0239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0239"
    },
    {
      "name": "CVE-2015-3291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3291"
    },
    {
      "name": "CVE-2015-2666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2666"
    },
    {
      "name": "CVE-2015-5697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5697"
    },
    {
      "name": "CVE-2014-8133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8133"
    },
    {
      "name": "CVE-2015-1593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1593"
    },
    {
      "name": "CVE-2014-8134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8134"
    },
    {
      "name": "CVE-2015-1333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1333"
    },
    {
      "name": "CVE-2015-2150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2150"
    },
    {
      "name": "CVE-2015-1421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1421"
    },
    {
      "name": "CVE-2014-9529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9529"
    },
    {
      "name": "CVE-2015-1420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1420"
    },
    {
      "name": "CVE-2015-2042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2042"
    },
    {
      "name": "CVE-2015-0275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0275"
    },
    {
      "name": "CVE-2014-8989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8989"
    },
    {
      "name": "CVE-2014-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8559"
    },
    {
      "name": "CVE-2015-3636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3636"
    },
    {
      "name": "CVE-2014-9428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9428"
    }
  ],
  "initial_release_date": "2015-08-20T00:00:00",
  "last_revision_date": "2015-08-20T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-359",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-08-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le \u003cspan\nclass=\"textit\"\u003enoyau Linux de Fedora\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Fedora",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Fedora-2015-13391 du 19 ao\u00fbt 2015",
      "url": "https://lwn.net/Articles/654984/"
    }
  ]
}

CERTFR-2015-AVI-054

Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Ubuntu. Elles permettent à un attaquant de provoquer un déni de service, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Ubuntu 10.04 LTS, 12.04 LTS

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu usn-2491-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2492-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2490-1 du 04 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu usn-2493-1 du 04 février 2015	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eUbuntu 10.04 LTS, 12.04 LTS\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8133"
    },
    {
      "name": "CVE-2014-9420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9420"
    },
    {
      "name": "CVE-2014-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3611"
    },
    {
      "name": "CVE-2014-3610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3610"
    },
    {
      "name": "CVE-2014-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9322"
    },
    {
      "name": "CVE-2014-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8559"
    }
  ],
  "initial_release_date": "2015-02-04T00:00:00",
  "last_revision_date": "2015-02-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-054",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-02-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2491-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2491-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2492-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2492-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2490-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2490-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu usn-2493-1 du 04 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2493-1/"
    }
  ]
}

CERTFR-2015-AVI-026

Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer un déni de service et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Debian whezzy versions antérieures à 3.2.65-1+deb7u1

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Debian DSA-3128-1 du 15 janvier 2015

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eDebian whezzy versions ant\u00e9rieures \u00e0 3.2.65-1+deb7u1\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-9419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9419"
    },
    {
      "name": "CVE-2013-6885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6885"
    },
    {
      "name": "CVE-2014-8133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8133"
    },
    {
      "name": "CVE-2014-9584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9584"
    },
    {
      "name": "CVE-2014-9529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9529"
    }
  ],
  "initial_release_date": "2015-01-15T00:00:00",
  "last_revision_date": "2015-01-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-026",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-01-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eDebian\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Debian",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-3128-1 du 15 janvier 2015",
      "url": "https://www.debian.org/security/2015/dsa-3128"
    }
  ]
}

CERTFR-2015-AVI-081

Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 12.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.04 LTS
Ubuntu	Ubuntu	Ubuntu 10.04 LTS
Ubuntu	Ubuntu	Ubuntu 14.10

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-2516-3 du 04 mars 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2518-1 du 26 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2516-1 du 26 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2511-1 du 26 février 2015	None	vendor-advisory
Bulletin de sécurité Ubuntu USN-2513-1 du 26 février 2015	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 10.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-7970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7970"
    },
    {
      "name": "CVE-2014-9585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9585"
    },
    {
      "name": "CVE-2014-9419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9419"
    },
    {
      "name": "CVE-2013-7421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7421"
    },
    {
      "name": "CVE-2015-0239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0239"
    },
    {
      "name": "CVE-2014-8133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8133"
    },
    {
      "name": "CVE-2014-8160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8160"
    },
    {
      "name": "CVE-2014-9420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9420"
    },
    {
      "name": "CVE-2014-9584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9584"
    },
    {
      "name": "CVE-2014-9529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9529"
    },
    {
      "name": "CVE-2014-9683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9683"
    },
    {
      "name": "CVE-2014-8989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8989"
    },
    {
      "name": "CVE-2014-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8559"
    },
    {
      "name": "CVE-2014-9644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9644"
    },
    {
      "name": "CVE-2014-9428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9428"
    }
  ],
  "initial_release_date": "2015-02-27T00:00:00",
  "last_revision_date": "2015-03-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-081",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-02-27T00:00:00.000000"
    },
    {
      "description": "mise \u00e0 jour suite \u00e0 la correction d\u0027une r\u00e9gression.",
      "revision_date": "2015-03-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux\nd\u0027\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer un d\u00e9ni de service, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2516-3 du 04 mars 2015",
      "url": "http://www.ubuntu.com/usn/usn-2516-3/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2518-1 du 26 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2518-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2516-1 du 26 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2516-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2511-1 du 26 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2511-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2513-1 du 26 f\u00e9vrier 2015",
      "url": "http://www.ubuntu.com/usn/usn-2513-1/"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2014-8133 (GCVE-0-2014-8133)

Vulnerability from cvelistv5

CERTFR-2015-AVI-359

Vulnerability from certfr_avis

Solution

CERTFR-2015-AVI-054

Vulnerability from certfr_avis

Solution

CERTFR-2015-AVI-026

Vulnerability from certfr_avis

Solution

CERTFR-2015-AVI-081

Vulnerability from certfr_avis

Solution

Tags

Sightings

Nomenclature