CVE - CVE - 2014 - 3153

CVE-ID
cve - 2014 - 3153	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
在内核/ futex futex_requeue函数。c在Linux内核中通过3.14.5并不确保调用有两个不同的futex地址,它允许本地用户获得特权通过精心FUTEX_REQUEUE命令,促进了不安全的服务员修改。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
报价:67906 URL: http://www.securityfocus.com/bid/67906 确认:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git; =提交;h = e9c243a5a6de0be8e584c604d353412584b592f8 确认:http://linux.oracle.com/errata/elsa - 2014 - 0771. - html 确认:http://linux.oracle.com/errata/elsa - 2014 - 3037. - html 确认:http://linux.oracle.com/errata/elsa - 2014 - 3038. - html 确认:http://linux.oracle.com/errata/elsa - 2014 - 3039. - html 确认:https://bugzilla.redhat.com/show_bug.cgi?id=1103626 确认:https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e 确认:https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339 确认:https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270 确认:https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8 DEBIAN: dsa - 2949 URL: http://www.debian.org/security/2014/dsa - 2949 EXPLOIT-DB: 35370 URL: http://www.exploit-db.com/exploits/35370 MISC: https://elongl.github.io/exploitation/2021/01/08/cve - 2014 - 3153. - html MISC: https://github.com/elongl/cve - 2014 - 3153 MISC: https://www.openwall.com/lists/oss-security/2021/02/01/4 MLIST: [oss-security] 20140605 Linux内核futex地方特权升级(cve - 2014 - 3153) URL: http://www.openwall.com/lists/oss-security/2014/06/05/22 MLIST: [oss-security] 20140605 Re: Linux内核futex地方特权升级(cve - 2014 - 3153) URL: http://openwall.com/lists/oss-security/2014/06/05/24 MLIST: [oss-security] 20140606 Re: Linux内核futex地方特权升级(cve - 2014 - 3153) URL: http://openwall.com/lists/oss-security/2014/06/06/20 MLIST: [oss-security] 20210201 Re: Linux内核:本地通过futexes priv升级 URL: http://www.openwall.com/lists/oss-security/2021/02/01/4 红帽:RHSA-2014:0800 URL: http://rhn.redhat.com/errata/rhsa - 2014 - 0800. - html SECTRACK: 1030451 URL: http://www.securitytracker.com/id/1030451 SECUNIA: 58500 URL: http://secunia.com/advisories/58500 SECUNIA: 58990 URL: http://secunia.com/advisories/58990 SECUNIA: 59029 URL: http://secunia.com/advisories/59029 SECUNIA: 59092 URL: http://secunia.com/advisories/59092 SECUNIA: 59153 URL: http://secunia.com/advisories/59153 SECUNIA: 59262 URL: http://secunia.com/advisories/59262 SECUNIA: 59309 URL: http://secunia.com/advisories/59309 SECUNIA: 59386 URL: http://secunia.com/advisories/59386 SECUNIA: 59599 URL: http://secunia.com/advisories/59599 SUSE: SUSE-SU-2014:0775 URL: http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html SUSE: SUSE-SU-2014:0796 URL: http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html SUSE: SUSE-SU-2014:0837 URL: http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html SUSE: SUSE-SU-2014:1316 URL: http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html SUSE: SUSE-SU-2014:1319 URL: http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html SUSE: openSUSE-SU-2014:0878 URL: http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html UBUNTU: usn - 2237 - 1 URL: http://www.ubuntu.com/usn/usn - 2237 - 1 UBUNTU: usn - 2240 - 1 URL: http://www.ubuntu.com/usn/usn - 2240 - 1
分配中央社
铬
创建日期记录
20140503	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20140503)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2014 - 3153