[Forgot Password]
Login  Register Subscribe

25354

 
 

132811

 
 

146396

 
 

909

 
 

117043

 
 

156

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2014-9090Date: (C)2014-12-09   (M)2020-03-27


The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 3.9
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
SECUNIA-62336
DSA-3093
SUSE-SU-2015:0736
SUSE-SU-2015:0812
http://www.openwall.com/lists/oss-security/2014/11/26/5
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f442be2fb22be02cafa606f1769fa1e6f894441
https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441
openSUSE-SU-2015:0566

CPE    200
cpe:/o:linux:linux_kernel:3.16.0
cpe:/o:linux:linux_kernel:3.16.1
cpe:/o:linux:linux_kernel:3.0.40
cpe:/o:linux:linux_kernel:3.1.10
...
CWE    1
CWE-17
OVAL    47
oval:org.secpod.oval:def:108483
oval:org.secpod.oval:def:109211
oval:org.secpod.oval:def:52362
oval:org.secpod.oval:def:52364
...

© SecPod Technologies