CVE-2014-4699

 

Published at: - 09-07-2014 01:07

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• [oss-security] 20140704 CVE-2014-4699: Linux ptrace bug-Mailing List, Third Party Advisory
• [oss-security] 20140708 Re: CVE-2014-4699: Linux ptrace bug-Mailing List, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.4
• [oss-security] 20140705 Re: CVE-2014-4699: Linux ptrace bug-Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1115927
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a
• [oss-security] 20140708 Re: CVE-2014-4699: Linux ptrace bug-Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a
• USN-2269-1-Third Party Advisory
• USN-2268-1-Third Party Advisory
• USN-2274-1-Third Party Advisory
• USN-2273-1-Third Party Advisory
• USN-2272-1-Third Party Advisory
• USN-2267-1-Third Party Advisory
• USN-2271-1-Third Party Advisory
• DSA-2972-Third Party Advisory
• USN-2266-1-Third Party Advisory
• USN-2270-1-Third Party Advisory
• https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.47
• 59639-Third Party Advisory
• https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11
• 59633-Third Party Advisory
• 59654-Third Party Advisory
• https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.97
• http://linux.oracle.com/errata/ELSA-2014-0924.html
• http://linux.oracle.com/errata/ELSA-2014-3047.html
• http://linux.oracle.com/errata/ELSA-2014-3048.html
• http://packetstormsecurity.com/files/127573/Linux-Kernel-ptrace-sysret-Local-Privilege-Escalation.html
• 34134-Exploit, Third Party Advisory, VDB Entry
• 60393-Third Party Advisory
• 108754-Broken Link
• 60220-Third Party Advisory
• 60380-Third Party Advisory

 

Keywords

NVD

 

CVE-2014-4699

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures