Action not permitted
Modal body text goes here.
Modal Title
Modal Body
BDU:2015-09847 (CVE-2013-7421)
Vulnerability from fstec – Published: 2016-07-06 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Ubuntu, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета linux-image-3.16.0 операционной системы Ubuntu, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удалённо
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Being clarified
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-17 - Код
Aliases
References
6 references
Impacted products
1 product
from 1 vendor
Vendors
Canonical Ltd.
Products
Ubuntu
Versions
14.04 LTS (Ubuntu), 14.10 (Ubuntu)
Product types
Operating system
Mitigations
Обновление пакета до более новой версии. Информация о версии исправленного пакета содержится в одном из следующих уведомлений безопасности, доступных по адресам: http://www.ubuntu.com/usn/usn-2545-1/ (для Ubuntu 14.04 LTS) и http://www.ubuntu.com/usn/usn-2546-1/ (для Ubuntu 14.10)
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "14.04 LTS (Ubuntu), 14.10 (Ubuntu)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0430\u043c: http://www.ubuntu.com/usn/usn-2545-1/ (\u0434\u043b\u044f Ubuntu 14.04 LTS) \u0438 http://www.ubuntu.com/usn/usn-2546-1/ (\u0434\u043b\u044f Ubuntu 14.10)",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.03.2015",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-09847",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2013-7421, CVE-2014-9644, CVE-2015-1421, USN-2545-1, USN-2546-1",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Ubuntu, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041a\u043e\u0434 (CWE-17)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 linux-image-3.16.0 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Ubuntu, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.ubuntu.com/usn/usn-2545-1/\nhttp://www.ubuntu.com/usn/usn-2546-1/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9644\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1421\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1465\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7421",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-17",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
CVE-2013-7421 (GCVE-0-2013-7421)
Vulnerability from cvelistv5 – Published: 2015-03-02 11:00 – Updated: 2024-08-06 18:09
VLAI
EPSS
VEX
Summary
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
20 references
Date Public
2013-03-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T18:09:16.533Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-03-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-7421",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
"refsource": "MISC",
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
"refsource": "MLIST",
"url": "https://lkml.org/lkml/2013/3/4/70"
},
{
"name": "USN-2514-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
},
{
"name": "MDVSA-2015:057",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
"refsource": "CONFIRM",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "USN-2545-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
},
{
"name": "72322",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72322"
},
{
"name": "USN-2513-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "USN-2543-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2543-1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-7421",
"datePublished": "2015-03-02T11:00:00.000Z",
"dateReserved": "2015-01-24T00:00:00.000Z",
"dateUpdated": "2024-08-06T18:09:16.533Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-9644 (GCVE-0-2014-9644)
Vulnerability from cvelistv5 – Published: 2015-03-02 11:00 – Updated: 2024-08-06 13:47
VLAI
EPSS
VEX
Summary
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
19 references
Date Public
2014-11-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:47:41.707Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72320"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-11-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72320"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-9644",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
"refsource": "MISC",
"url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
},
{
"name": "RHSA-2016:0068",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
},
{
"name": "USN-2544-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2544-1"
},
{
"name": "DSA-3170",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
},
{
"name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
},
{
"name": "USN-2546-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
},
{
"name": "USN-2514-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2514-1"
},
{
"name": "MDVSA-2015:057",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
"refsource": "CONFIRM",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
},
{
"name": "MDVSA-2015:058",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
},
{
"name": "72320",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72320"
},
{
"name": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2545-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "USN-2513-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2513-1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
},
{
"name": "USN-2543-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2543-1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-9644",
"datePublished": "2015-03-02T11:00:00.000Z",
"dateReserved": "2015-01-24T00:00:00.000Z",
"dateUpdated": "2024-08-06T13:47:41.707Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2015-1421 (GCVE-0-2015-1421)
Vulnerability from cvelistv5 – Published: 2015-03-16 10:00 – Updated: 2024-08-06 04:40
VLAI
EPSS
VEX
Summary
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
21 references
Date Public
2015-01-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T04:40:18.578Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "USN-2542-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2542-1"
},
{
"name": "USN-2562-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2562-1"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "RHSA-2015:1082",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1082.html"
},
{
"name": "USN-2541-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2541-1"
},
{
"name": "RHSA-2015:0751",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0751.html"
},
{
"name": "USN-2563-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2563-1"
},
{
"name": "SUSE-SU-2015:0832",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208"
},
{
"name": "1032172",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032172"
},
{
"name": "RHSA-2015:0864",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
},
{
"name": "[oss-security] 20150129 Re: CVE request -- Linux kernel - net: sctp: slab corruption from use after free on INIT collisions",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/29/15"
},
{
"name": "RHSA-2015:0782",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "SUSE-SU-2015:1478",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=600ddd6825543962fb807884169e57b580dba208"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196581"
},
{
"name": "RHSA-2015:0726",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0726.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8"
},
{
"name": "72356",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/72356"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-01-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "DSA-3170",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "USN-2542-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2542-1"
},
{
"name": "USN-2562-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2562-1"
},
{
"name": "USN-2546-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "RHSA-2015:1082",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1082.html"
},
{
"name": "USN-2541-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2541-1"
},
{
"name": "RHSA-2015:0751",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0751.html"
},
{
"name": "USN-2563-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2563-1"
},
{
"name": "SUSE-SU-2015:0832",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208"
},
{
"name": "1032172",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1032172"
},
{
"name": "RHSA-2015:0864",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
},
{
"name": "[oss-security] 20150129 Re: CVE request -- Linux kernel - net: sctp: slab corruption from use after free on INIT collisions",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2015/01/29/15"
},
{
"name": "RHSA-2015:0782",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
},
{
"name": "USN-2545-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "SUSE-SU-2015:1478",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=600ddd6825543962fb807884169e57b580dba208"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196581"
},
{
"name": "RHSA-2015:0726",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0726.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8"
},
{
"name": "72356",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/72356"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-1421",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-3170",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2015/dsa-3170"
},
{
"name": "USN-2542-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2542-1"
},
{
"name": "USN-2562-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2562-1"
},
{
"name": "USN-2546-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2546-1"
},
{
"name": "RHSA-2015:1082",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1082.html"
},
{
"name": "USN-2541-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2541-1"
},
{
"name": "RHSA-2015:0751",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0751.html"
},
{
"name": "USN-2563-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2563-1"
},
{
"name": "SUSE-SU-2015:0832",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html"
},
{
"name": "https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208",
"refsource": "CONFIRM",
"url": "https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208"
},
{
"name": "1032172",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032172"
},
{
"name": "RHSA-2015:0864",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
},
{
"name": "[oss-security] 20150129 Re: CVE request -- Linux kernel - net: sctp: slab corruption from use after free on INIT collisions",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2015/01/29/15"
},
{
"name": "RHSA-2015:0782",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
},
{
"name": "USN-2545-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2545-1"
},
{
"name": "SUSE-SU-2015:1478",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=600ddd6825543962fb807884169e57b580dba208",
"refsource": "CONFIRM",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=600ddd6825543962fb807884169e57b580dba208"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1196581",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196581"
},
{
"name": "RHSA-2015:0726",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0726.html"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8",
"refsource": "CONFIRM",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8"
},
{
"name": "72356",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/72356"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-1421",
"datePublished": "2015-03-16T10:00:00.000Z",
"dateReserved": "2015-01-29T00:00:00.000Z",
"dateUpdated": "2024-08-06T04:40:18.578Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
USN-2545-1 (UBUNTU-CVE-2013-7421)
Vulnerability from osv_ubuntu – Published: 2015-03-24 09:25 – Updated: 2026-02-10 04:40 – Source website
VLAI
Summary
linux-lts-utopic vulnerabilities
Details
A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. (CVE-2013-7421)
A flaw was discovered in the crypto subsystem when screening module names for automatic module loading if the name contained a valid crypto module name, eg. vfat(aes). A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. (CVE-2014-9644)
Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP (Stream Control Transmission Protocol) subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges on the system. (CVE-2015-1421)
Marcelo Leitner discovered a flaw in the Linux kernel's routing of packets to too many different dsts/too fast. A remote attacker can exploit this flaw to cause a denial of service (system crash). (CVE-2015-1465)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2013-7421",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2014-9644",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2015-1421",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2015-1465",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "block-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "block-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "block-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "block-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "block-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "crypto-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "crypto-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "crypto-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "crypto-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "crypto-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fat-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fat-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fat-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fat-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fat-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fb-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "firewire-core-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "firewire-core-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "firewire-core-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "firewire-core-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "floppy-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "floppy-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "floppy-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "floppy-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-core-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-core-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-core-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-core-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-core-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-secondary-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-secondary-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-secondary-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-secondary-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "fs-secondary-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "input-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "input-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "input-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "input-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "input-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ipmi-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ipmi-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ipmi-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ipmi-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ipmi-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "irda-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "irda-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "irda-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "irda-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "irda-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "kernel-image-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "kernel-image-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "kernel-image-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "kernel-image-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "kernel-image-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-cloud-tools-3.16.0-33-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-cloud-tools-3.16.0-33-lowlatency",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-generic-lpae",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-lowlatency",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-powerpc-e500mc",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-powerpc-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-powerpc64-emb",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-headers-3.16.0-33-powerpc64-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-generic-lpae",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-lowlatency",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-powerpc-e500mc",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-powerpc-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-powerpc64-emb",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-3.16.0-33-powerpc64-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-image-extra-3.16.0-33-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-cloud-tools-3.16.0-33",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-cloud-tools-common",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-tools-3.16.0-33",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-tools-common",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-udebs-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-udebs-generic-lpae",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-udebs-powerpc-e500mc",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-udebs-powerpc-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-lts-utopic-udebs-powerpc64-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-generic",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-generic-lpae",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-lowlatency",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-powerpc-e500mc",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-powerpc-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-powerpc64-emb",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "linux-tools-3.16.0-33-powerpc64-smp",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "md-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "md-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "md-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "md-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "md-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "message-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "message-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "message-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "message-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "mouse-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "mouse-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "mouse-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "mouse-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "mouse-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "multipath-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "multipath-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "multipath-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "multipath-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "multipath-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nfs-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nfs-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nfs-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nfs-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nfs-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-pcmcia-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-shared-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-shared-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-shared-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-shared-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-shared-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-usb-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-usb-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-usb-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-usb-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "nic-usb-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "parport-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "parport-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "parport-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "parport-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "parport-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pata-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pata-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pata-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pata-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pcmcia-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "pcmcia-storage-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "plip-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "plip-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "plip-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "plip-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "plip-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ppp-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ppp-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ppp-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ppp-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "ppp-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "sata-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "sata-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "sata-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "sata-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "sata-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "scsi-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "scsi-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "scsi-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "scsi-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "scsi-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "serial-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "speakup-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "speakup-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "speakup-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "speakup-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "speakup-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "squashfs-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "squashfs-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "squashfs-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "squashfs-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "squashfs-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "storage-core-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "storage-core-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "storage-core-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "storage-core-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "storage-core-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "usb-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "usb-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "usb-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "usb-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "usb-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "virtio-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "virtio-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "virtio-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "virtio-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "vlan-modules-3.16.0-33-generic-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "vlan-modules-3.16.0-33-generic-lpae-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "vlan-modules-3.16.0-33-powerpc-e500mc-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "vlan-modules-3.16.0-33-powerpc-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
},
{
"binary_name": "vlan-modules-3.16.0-33-powerpc64-smp-di",
"binary_version": "3.16.0-33.44~14.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "linux-lts-utopic",
"purl": "pkg:deb/ubuntu/linux-lts-utopic@3.16.0-33.44~14.04.1?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.16.0-33.44~14.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.16.0-25.33~14.04.2",
"3.16.0-26.35~14.04.1",
"3.16.0-28.37~14.04.1",
"3.16.0-28.38~14.04.1",
"3.16.0-29.39~14.04.1",
"3.16.0-30.40~14.04.1",
"3.16.0-31.41~14.04.1",
"3.16.0-31.43~14.04.1"
]
}
],
"aliases": [],
"details": "A flaw was discovered in the automatic loading of modules in the crypto\nsubsystem of the Linux kernel. A local user could exploit this flaw to load\ninstalled kernel modules, increasing the attack surface and potentially\nusing this to gain administrative privileges. (CVE-2013-7421)\n\nA flaw was discovered in the crypto subsystem when screening module names\nfor automatic module loading if the name contained a valid crypto module\nname, eg. vfat(aes). A local user could exploit this flaw to load installed\nkernel modules, increasing the attack surface and potentially using this to\ngain administrative privileges. (CVE-2014-9644)\n\nSun Baoliang discovered a use after free flaw in the Linux kernel\u0027s SCTP\n(Stream Control Transmission Protocol) subsystem during INIT collisions. A\nremote attacker could exploit this flaw to cause a denial of service\n(system crash) or potentially escalate their privileges on the system.\n(CVE-2015-1421)\n\nMarcelo Leitner discovered a flaw in the Linux kernel\u0027s routing of packets\nto too many different dsts/too fast. A remote attacker can exploit this\nflaw to cause a denial of service (system crash). (CVE-2015-1465)\n",
"id": "USN-2545-1",
"modified": "2026-02-10T04:40:53Z",
"published": "2015-03-24T09:25:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-2545-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2013-7421"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-9644"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2015-1421"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2015-1465"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "linux-lts-utopic vulnerabilities",
"upstream": [
"UBUNTU-CVE-2013-7421",
"UBUNTU-CVE-2014-9644",
"UBUNTU-CVE-2015-1421",
"UBUNTU-CVE-2015-1465"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…
Loading…