Published: 19/07/2014 Updated: 19/01/2024

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 700

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel up to and including 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
suse linux enterprise desktop 11
suse linux enterprise server 11
opensuse opensuse 11.4
redhat enterprise linux server aus 6.2
debian debian linux 7.0

Debian Bug report logs - #728705 gdb fails on s390x with "Couldn't write registers: Invalid argument" Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Affects: gdb Reported by: Thibaut Paumard <thibaut@debianorg> Date: Mon, 4 Nov 2013 13:45:02 UTC Severity: importa ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-3534 Martin Schwidefsky of IBM discovered that the ptrace subsystem does not properly sanitize the psw mask value On s390 systems, an unprivileged local user could use this flaw to set address space ...

A flaw was found in the way the pppol2tp_setsockopt() and pppol2tp_getsockopt() functions in the Linux kernel's PPP over L2TP implementation handled requests with a non-SOL_PPPOL2TP socket option level A local, unprivileged user could use this flaw to escalate their privileges on the system ...

Several security issues were fixed in the kernel ...

The PPPoL2TP feature in net/l2tp/l2tp_pppc in the Linux kernel through 3156 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket This is a POC to reproduce vulnerability No exploitation here, just simple kernel panic ...

/* ---------------------------------------------------------------------------------------------------- * cve-2014-4943_pocc * * The PPPoL2TP feature in net/l2tp/l2tp_pppc in the Linux kernel through 3156 allows local users to gain privileges by leveraging data-structure * differences between an l2tp socket and an inet socket * * Thi ...

/* Socket Re-use Combo for linux x86 systems by ZadYree -- 50 bytes * <zadyree@tuxfamilyorg> * * Made using sockfd trick + dup2(0,0), dup2(0,1), dup2(0,2) + * execve /bin/sh * * Thanks: Charles Stevenson, ipv, 3LRVS research team * * gcc -o socket_reuse socket_reusec -z execstack */ char shellcode[]= /* We use sys_dup(2) to get th ...

Estudo e apresentação do bug CVE-2014-4943 para a disciplina MAC0448

CVE-2014-4943 The PPPoL2TP feature in net/l2tp/l2tp_pppc in the Linux kernel through 3156 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket CVSS v2 Base Score: 69 (MEDIUM)

CWE-269 http://openwall.com/lists/oss-security/2014/07/17/1 https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf https://bugzilla.redhat.com/show_bug.cgi?id=1119458 http://secunia.com/advisories/60393 http://secunia.com/advisories/60011 http://linux.oracle.com/errata/ELSA-2014-0924.html http://linux.oracle.com/errata/ELSA-2014-3047.html http://secunia.com/advisories/60071 http://linux.oracle.com/errata/ELSA-2014-3048.html http://secunia.com/advisories/60220 http://secunia.com/advisories/60380 http://www.securitytracker.com/id/1030610 http://www.debian.org/security/2014/dsa-2992 http://rhn.redhat.com/errata/RHSA-2014-1025.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html http://www.exploit-db.com/exploits/36267 http://osvdb.org/show/osvdb/109277 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://secunia.com/advisories/59790 https://exchange.xforce.ibmcloud.com/vulnerabilities/94665 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728705 https://nvd.nist.gov https://github.com/redes-2015/l2tp-socket-bug https://www.exploit-db.com/exploits/36267/https://access.redhat.com/security/cve/cve-2014-4943 https://www.debian.org/security/./dsa-2992 https://usn.ubuntu.com/2281-1/

CVE-2014-4943

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect