CVE-2014-9585

LOW

Description

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

References

http://git.kernel.org/?p=linux/kernel/git/luto/linux.git;a=commit;h=bc3b94c31d65e761ddfe150d02932c65971b74e2

http://git.kernel.org/?p=linux/kernel/git/tip/tip.git;a=commit;h=fbe1bf140671619508dfa575d74a185ae53c5dbb

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.html

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

http://rhn.redhat.com/errata/RHSA-2015-1081.html

http://rhn.redhat.com/errata/RHSA-2015-1778.html

http://rhn.redhat.com/errata/RHSA-2015-1787.html

http://v0ids3curity.blogspot.in/2014/12/return-to-vdso-using-elf-auxiliary.html

http://www.debian.org/security/2015/dsa-3170

http://www.mandriva.com/security/advisories?name=MDVSA-2015:058

http://www.openwall.com/lists/oss-security/2014/12/09/10

http://www.openwall.com/lists/oss-security/2015/01/09/8

http://www.securityfocus.com/bid/71990

http://www.ubuntu.com/usn/USN-2513-1

http://www.ubuntu.com/usn/USN-2514-1

http://www.ubuntu.com/usn/USN-2515-1

http://www.ubuntu.com/usn/USN-2516-1

http://www.ubuntu.com/usn/USN-2517-1

http://www.ubuntu.com/usn/USN-2518-1

Details

Source: MITRE

Published: 2015-01-09

Updated: 2020-05-21

Risk Information

CVSS v2.0

Base Score: 2.1

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Impact Score: 2.9

Exploitability Score: 3.9

Severity: LOW

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 3.18.2 (inclusive)

Configuration 2

OR

cpe:2.3:o:redhat:enterprise_linux_aus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*

Configuration 4

OR

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Configuration 5

OR

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 6

OR

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

Tenable Plugins

View all (41 total)

IDNameProductFamilySeverity
124983EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1530)NessusHuawei Local Security Checks
high
124807EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1483)NessusHuawei Local Security Checks
high
99163OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)NessusOracleVM Local Security Checks
critical
90019OracleVM 3.2 : kernel-uek (OVMSA-2016-0037)NessusOracleVM Local Security Checks
critical
86702RHEL 7 : kernel (RHSA-2015:1778)NessusRed Hat Local Security Checks
high
86511CentOS 7 : kernel (CESA-2015:1778)NessusCentOS Local Security Checks
high
85980RHEL 7 : kernel-rt (RHSA-2015:1788)NessusRed Hat Local Security Checks
high
85979RHEL 6 : kernel-rt (RHSA-2015:1787)NessusRed Hat Local Security Checks
high
85960Scientific Linux Security Update : kernel on SL7.x x86_64 (20150915)NessusScientific Linux Local Security Checks
high
85958Oracle Linux 7 : kernel (ELSA-2015-1778)NessusOracle Linux Local Security Checks
high
85856F5 Networks BIG-IP : Linux kernel vulnerability (K17241)NessusF5 Networks Local Security Checks
low
85188OracleVM 3.3 : kernel-uek (OVMSA-2015-0109)NessusOracleVM Local Security Checks
critical
85177Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3064)NessusOracle Linux Local Security Checks
critical
85097Oracle Linux 6 : kernel (ELSA-2015-1272)NessusOracle Linux Local Security Checks
high
84141OracleVM 3.3 : kernel-uek (OVMSA-2015-0069)NessusOracleVM Local Security Checks
medium
84110Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3043)NessusOracle Linux Local Security Checks
medium
84109Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3042)NessusOracle Linux Local Security Checks
medium
84108Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3041)NessusOracle Linux Local Security Checks
medium
84091CentOS 6 : kernel (CESA-2015:1081)NessusCentOS Local Security Checks
high
84078Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150609)NessusScientific Linux Local Security Checks
high
84075RHEL 6 : kernel (RHSA-2015:1081)NessusRed Hat Local Security Checks
high
84073Oracle Linux 6 : kernel (ELSA-2015-1081)NessusOracle Linux Local Security Checks
high
83708SUSE SLES11 Security Update : kernel (SUSE-SU-2015:0652-1)NessusSuSE Local Security Checks
high
83696SUSE SLES11 Security Update : kernel (SUSE-SU-2015:0481-1)NessusSuSE Local Security Checks
high
83678SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:0178-1)NessusSuSE Local Security Checks
high
82756openSUSE Security Update : Linux Kernel (openSUSE-2015-302)NessusSuSE Local Security Checks
critical
82755openSUSE Security Update : the Linux Kernel (openSUSE-2015-301)NessusSuSE Local Security Checks
high
82138Debian DLA-155-1 : linux-2.6 security updateNessusDebian Local Security Checks
critical
82020SuSE 11.3 Security Update : Linux Kernel (SAT Patch Numbers 10412 / 10415 / 10416)NessusSuSE Local Security Checks
high
81941Mandriva Linux Security Advisory : kernel (MDVSA-2015:058)NessusMandriva Local Security Checks
high
81646Ubuntu 14.04 LTS : linux vulnerabilities (USN-2516-3)NessusUbuntu Local Security Checks
high
81645Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2515-2)NessusUbuntu Local Security Checks
high
81590Ubuntu 14.04 LTS : linux vulnerability (USN-2516-2)NessusUbuntu Local Security Checks
high
81571Ubuntu 14.10 : linux vulnerabilities (USN-2518-1)NessusUbuntu Local Security Checks
high
81570Ubuntu 14.04 LTS : linux-lts-utopic vulnerabilities (USN-2517-1)NessusUbuntu Local Security Checks
high
81569Ubuntu 14.04 LTS : linux vulnerabilities (USN-2516-1)NessusUbuntu Local Security Checks
high
81568Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2515-1)NessusUbuntu Local Security Checks
high
81567Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)NessusUbuntu Local Security Checks
medium
81449Debian DSA-3170-1 : linux - security updateNessusDebian Local Security Checks
critical
80976Fedora 21 : kernel-3.18.3-201.fc21 (2015-0937)NessusFedora Local Security Checks
low
80578Mandriva Linux Security Advisory : kernel (MDVSA-2015:027)NessusMandriva Local Security Checks
high