Action not permitted
Modal body text goes here.
Modal Title
Modal Body
BDU:2015-09845 (CVE-2013-7421)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Ubuntu, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета linux-image-3.13.0 операционной системы Ubuntu, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена локально
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Being clarified
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-17 - Код
Aliases
References
6 references
Impacted products
1 product
from 1 vendor
Vendors
Canonical Ltd.
Products
Ubuntu
Versions
12.04 LTS (Ubuntu), 14.04 LTS (Ubuntu)
Product types
Operating system
Mitigations
Обновление пакета до более новой версии. Информация о версии исправленного пакета содержится в одном из следующих уведомлений безопасности, доступных по адресам: http://www.ubuntu.com/usn/usn-2543-1/ (для Ubuntu 12.04 LTS) и http://www.ubuntu.com/usn/usn-2544-1/ (для Ubuntu 14.04 LTS)
{
"CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "12.04 LTS (Ubuntu), 14.04 LTS (Ubuntu)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0430\u043c: http://www.ubuntu.com/usn/usn-2543-1/ (\u0434\u043b\u044f Ubuntu 12.04 LTS) \u0438 http://www.ubuntu.com/usn/usn-2544-1/ (\u0434\u043b\u044f Ubuntu 14.04 LTS)",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.03.2015",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-09845",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2013-7421, CVE-2014-7822, CVE-2014-9644, CVE-2015-0274, USN-2543-1, USN-2544-1",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Ubuntu, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041a\u043e\u0434 (CWE-17)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 linux-image-3.13.0 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Ubuntu, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.ubuntu.com/usn/usn-2543-1/\nhttp://www.ubuntu.com/usn/usn-2544-1/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0274\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7822\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9644\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7421",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-17",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}
CVE-2013-7421 (GCVE-0-2013-7421)
Vulnerability from cvelistv5 – Published: 2015-03-02 11:00 – Updated: 2024-08-06 18:09
VLAI
EPSS
VEX
Summary
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
20 references
Date Public
2013-03-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T18:09:16.533Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-03-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-7421",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
"refsource": "MISC",
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"refsource": "MLIST",
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
"refsource": "CONFIRM",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-7421",
"datePublished": "2015-03-02T11:00:00.000Z",
"dateReserved": "2015-01-24T00:00:00.000Z",
"dateUpdated": "2024-08-06T18:09:16.533Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-7822 (GCVE-0-2014-7822)
Vulnerability from cvelistv5 – Published: 2015-03-16 10:00 – Updated: 2024-08-06 13:03
VLAI
EPSS
VEX
Summary
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
21 references
Date Public
2015-01-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:03:27.355Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1163792"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "36743",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/36743/"
},
{
"name": "USN-2542-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2542-1"
},
{
"name": "SUSE-SU-2015:1489",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
},
{
"name": "SUSE-SU-2015:0736",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
},
{
"name": "RHSA-2015:0164",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0164.html"
},
{
"name": "SUSE-SU-2015:1488",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html"
},
{
"name": "72347",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72347"
},
{
"name": "USN-2541-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2541-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958"
},
{
"name": "RHSA-2015:0694",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "117810",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/117810"
},
{
"name": "SUSE-SU-2015:0529",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
},
{
"name": "openSUSE-SU-2015:0714",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"name": "RHSA-2015:0102",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
},
{
"name": "RHSA-2015:0674",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0674.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-01-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-12-30T16:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1163792"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "36743",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/36743/"
},
{
"name": "USN-2542-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2542-1"
},
{
"name": "SUSE-SU-2015:1489",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
},
{
"name": "SUSE-SU-2015:0736",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
},
{
"name": "RHSA-2015:0164",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0164.html"
},
{
"name": "SUSE-SU-2015:1488",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html"
},
{
"name": "72347",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72347"
},
{
"name": "USN-2541-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2541-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958"
},
{
"name": "RHSA-2015:0694",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "117810",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/117810"
},
{
"name": "SUSE-SU-2015:0529",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
},
{
"name": "openSUSE-SU-2015:0714",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"name": "RHSA-2015:0102",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
},
{
"name": "RHSA-2015:0674",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0674.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-7822",
"datePublished": "2015-03-16T10:00:00.000Z",
"dateReserved": "2014-10-03T00:00:00.000Z",
"dateUpdated": "2024-08-06T13:03:27.355Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-9644 (GCVE-0-2014-9644)
Vulnerability from cvelistv5 – Published: 2015-03-02 11:00 – Updated: 2024-08-06 13:47
VLAI
EPSS
VEX
Summary
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
19 references
Date Public
2014-11-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:47:41.707Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72320"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-11-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72320"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-9644",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
"refsource": "MISC",
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
"refsource": "CONFIRM",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72320"
},
{
"name": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-9644",
"datePublished": "2015-03-02T11:00:00.000Z",
"dateReserved": "2015-01-24T00:00:00.000Z",
"dateUpdated": "2024-08-06T13:47:41.707Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2015-0274 (GCVE-0-2015-0274)
Vulnerability from cvelistv5 – Published: 2015-03-16 10:00 – Updated: 2024-08-06 04:03
VLAI
EPSS
VEX
Summary
The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.ubuntu.com/usn/USN-2544-1 | vendor-advisoryx_refsource_UBUNTU |
| https://github.com/torvalds/linux/commit/8275cdd0… | x_refsource_CONFIRM |
| http://rhn.redhat.com/errata/RHSA-2015-0694.html | vendor-advisoryx_refsource_REDHAT |
| http://rhn.redhat.com/errata/RHSA-2015-0290.html | vendor-advisoryx_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=1195248 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id/1031853 | vdb-entryx_refsource_SECTRACK |
| http://www.ubuntu.com/usn/USN-2543-1 | vendor-advisoryx_refsource_UBUNTU |
| http://git.kernel.org/?p=linux/kernel/git/torvald… | x_refsource_CONFIRM |
Date Public
2015-03-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T04:03:10.950Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59"
},
{
"name": "RHSA-2015:0694",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
},
{
"name": "RHSA-2015:0290",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1195248"
},
{
"name": "1031853",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1031853"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-03-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2015-03-25T12:57:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59"
},
{
"name": "RHSA-2015:0694",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0694.html"
},
{
"name": "RHSA-2015:0290",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0290.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1195248"
},
{
"name": "1031853",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1031853"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2015-0274",
"datePublished": "2015-03-16T10:00:00.000Z",
"dateReserved": "2014-11-18T00:00:00.000Z",
"dateUpdated": "2024-08-06T04:03:10.950Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
USN-2544-1 (UBUNTU-CVE-2013-7421)
Vulnerability from osv_ubuntu – Published: 2015-03-24 09:22 – Updated: 2026-04-22 07:36 – Source website
VLAI
Summary
linux vulnerabilities
Details
Eric Windisch discovered flaw in how the Linux kernel's XFS file system replaces remote attributes. A local access with access to an XFS file system could exploit this flaw to escalate their privileges. (CVE-2015-0274)
A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. (CVE-2013-7421)
The Linux kernel's splice system call did not correctly validate its parameters. A local, unprivileged user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-7822)
A flaw was discovered in the crypto subsystem when screening module names for automatic module loading if the name contained a valid crypto module name, eg. vfat(aes). A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. (CVE-2014-9644)
Carl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) failed to verify symlink size info. A local attacker, who is able to mount a malicous UDF file system image, could exploit this flaw to cause a denial of service (system crash) or possibly cause other undesired behaviors. (CVE-2014-9728)
Carl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not valid inode size information . A local attacker, who is able to mount a malicous UDF file system image, could exploit this flaw to cause a denial of service (system crash) or possibly cause other undesired behaviors. (CVE-2014-9729)
Carl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not correctly verify the component length for symlinks. A local attacker, who is able to mount a malicous UDF file system image, could exploit this flaw to cause a denial of service (system crash) or possibly cause other undesired behaviors. (CVE-2014-9730)
Carl H Lunde discovered an information leak in the UDF file system (CONFIG_UDF_FS). A local attacker, who is able to mount a malicous UDF file system image, could exploit this flaw to read potential sensitve kernel memory. (CVE-2014-9731)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2013-7421",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-7822",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9644",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9728",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9729",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9730",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9731",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2015-0274",
"severity": [
{
"score": "high",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "block-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "block-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "block-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "block-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "block-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "block-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "crypto-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fat-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fb-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "firewire-core-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "firewire-core-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "firewire-core-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "firewire-core-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "firewire-core-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "floppy-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "floppy-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "floppy-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "floppy-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "floppy-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-core-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "fs-secondary-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "input-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ipmi-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "irda-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "kernel-image-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-cloud-tools-3.13.0-48",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-cloud-tools-3.13.0-48-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-cloud-tools-3.13.0-48-lowlatency",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-generic-lpae",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-lowlatency",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-powerpc-e500",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-powerpc-e500mc",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-powerpc-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-powerpc64-emb",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-headers-3.13.0-48-powerpc64-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-generic-lpae",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-lowlatency",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-powerpc-e500",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-powerpc-e500mc",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-powerpc-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-powerpc64-emb",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-3.13.0-48-powerpc64-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-image-extra-3.13.0-48-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-source-3.13.0",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-generic-lpae",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-lowlatency",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-powerpc-e500",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-powerpc-e500mc",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-powerpc-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-powerpc64-emb",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-3.13.0-48-powerpc64-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-tools-common",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-generic-lpae",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-powerpc-e500",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-powerpc-e500mc",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-powerpc-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "linux-udebs-powerpc64-smp",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "md-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "message-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "message-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "message-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "message-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "message-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "mouse-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "multipath-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nfs-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-pcmcia-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-shared-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "nic-usb-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "parport-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pata-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pata-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pata-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pata-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pata-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pcmcia-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "pcmcia-storage-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "plip-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "ppp-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "sata-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "scsi-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "serial-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "speakup-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "squashfs-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "storage-core-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "usb-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "virtio-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "virtio-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "virtio-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "virtio-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "virtio-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-generic-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-generic-lpae-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-powerpc-e500-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-powerpc-e500mc-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-powerpc-smp-di",
"binary_version": "3.13.0-48.80"
},
{
"binary_name": "vlan-modules-3.13.0-48-powerpc64-smp-di",
"binary_version": "3.13.0-48.80"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@3.13.0-48.80?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.13.0-48.80"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.11.0-12.19",
"3.12.0-1.3",
"3.12.0-2.5",
"3.12.0-2.7",
"3.12.0-3.8",
"3.12.0-3.9",
"3.12.0-4.10",
"3.12.0-4.12",
"3.12.0-5.13",
"3.12.0-7.15",
"3.13.0-1.16",
"3.13.0-2.17",
"3.13.0-3.18",
"3.13.0-4.19",
"3.13.0-5.20",
"3.13.0-6.23",
"3.13.0-7.25",
"3.13.0-7.26",
"3.13.0-8.27",
"3.13.0-8.28",
"3.13.0-10.30",
"3.13.0-11.31",
"3.13.0-12.32",
"3.13.0-13.33",
"3.13.0-14.34",
"3.13.0-15.35",
"3.13.0-16.36",
"3.13.0-17.37",
"3.13.0-18.38",
"3.13.0-19.39",
"3.13.0-19.40",
"3.13.0-20.42",
"3.13.0-21.43",
"3.13.0-22.44",
"3.13.0-23.45",
"3.13.0-24.46",
"3.13.0-24.47",
"3.13.0-27.50",
"3.13.0-29.53",
"3.13.0-30.54",
"3.13.0-30.55",
"3.13.0-32.57",
"3.13.0-33.58",
"3.13.0-34.60",
"3.13.0-35.62",
"3.13.0-36.63",
"3.13.0-37.64",
"3.13.0-39.66",
"3.13.0-40.69",
"3.13.0-41.70",
"3.13.0-43.72",
"3.13.0-44.73",
"3.13.0-45.74",
"3.13.0-46.75",
"3.13.0-46.76",
"3.13.0-46.77",
"3.13.0-46.79"
]
}
],
"aliases": [],
"details": "\nEric Windisch discovered flaw in how the Linux kernel\u0027s XFS file system\nreplaces remote attributes. A local access with access to an XFS file\nsystem could exploit this flaw to escalate their privileges.\n(CVE-2015-0274)\n\nA flaw was discovered in the automatic loading of modules in the crypto\nsubsystem of the Linux kernel. A local user could exploit this flaw to load\ninstalled kernel modules, increasing the attack surface and potentially\nusing this to gain administrative privileges. (CVE-2013-7421)\n\nThe Linux kernel\u0027s splice system call did not correctly validate its\nparameters. A local, unprivileged user could exploit this flaw to cause a\ndenial of service (system crash). (CVE-2014-7822)\n\nA flaw was discovered in the crypto subsystem when screening module names\nfor automatic module loading if the name contained a valid crypto module\nname, eg. vfat(aes). A local user could exploit this flaw to load installed\nkernel modules, increasing the attack surface and potentially using this to\ngain administrative privileges. (CVE-2014-9644)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) failed to\nverify symlink size info. A local attacker, who is able to mount a malicous\nUDF file system image, could exploit this flaw to cause a denial of service\n(system crash) or possibly cause other undesired behaviors. (CVE-2014-9728)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not\nvalid inode size information . A local attacker, who is able to mount a\nmalicous UDF file system image, could exploit this flaw to cause a denial\nof service (system crash) or possibly cause other undesired behaviors.\n(CVE-2014-9729)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not\ncorrectly verify the component length for symlinks. A local attacker, who\nis able to mount a malicous UDF file system image, could exploit this flaw\nto cause a denial of service (system crash) or possibly cause other\nundesired behaviors. (CVE-2014-9730)\n\nCarl H Lunde discovered an information leak in the UDF file system\n(CONFIG_UDF_FS). A local attacker, who is able to mount a malicous UDF file\nsystem image, could exploit this flaw to read potential sensitve kernel\nmemory. (CVE-2014-9731)\n",
"id": "USN-2544-1",
"modified": "2026-04-22T07:36:32Z",
"published": "2015-03-24T09:22:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-2544-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2013-7421"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-7822"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9644"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9728"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9729"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9730"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9731"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2015-0274"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "linux vulnerabilities",
"upstream": [
"UBUNTU-CVE-2013-7421",
"UBUNTU-CVE-2014-7822",
"UBUNTU-CVE-2014-9644",
"UBUNTU-CVE-2014-9728",
"UBUNTU-CVE-2014-9729",
"UBUNTU-CVE-2014-9730",
"UBUNTU-CVE-2014-9731",
"UBUNTU-CVE-2015-0274"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…
Loading…