Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.1
CVSSv2

CVE-2014-8133

Published: 17/12/2014 Updated: 13/02/2023
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 188
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Linux

Vulnerability Summary

arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel up to and including 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 3.9.0

linux linux kernel 3.4.75

linux linux kernel 3.2.21

linux linux kernel 3.4.30

linux linux kernel 3.4.4

linux linux kernel 3.0.25

linux linux kernel 3.17.4

linux linux kernel 3.15.8

linux linux kernel 3.1.2

linux linux kernel 3.10.8

linux linux kernel 3.15.1

linux linux kernel 3.4.11

linux linux kernel 3.0

linux linux kernel 3.2.19

linux linux kernel 3.0.22

linux linux kernel 3.2.23

linux linux kernel 3.4.55

linux linux kernel 3.4.26

linux linux kernel 3.4.53

linux linux kernel 3.4.13

linux linux kernel 3.6.7

linux linux kernel 3.9.3

linux linux kernel 3.12

linux linux kernel 3.8.10

linux linux kernel 3.0.5

linux linux kernel 3.4.78

linux linux kernel 3.5.2

linux linux kernel 3.4.1

linux linux kernel 3.2.18

linux linux kernel 3.0.68

linux linux kernel 3.14

linux linux kernel 3.3

linux linux kernel 3.13.1

linux linux kernel 3.0.38

linux linux kernel 3.4.71

linux linux kernel 3.13.10

linux linux kernel 3.8.2

linux linux kernel 3.1

linux linux kernel 3.4

linux linux kernel 3.0.63

linux linux kernel 3.9.11

linux linux kernel 3.0.46

linux linux kernel 3.10.24

linux linux kernel 3.13.11

linux linux kernel 3.0.47

linux linux kernel 3.0.48

linux linux kernel 3.15.3

linux linux kernel 3.2.5

linux linux kernel 3.2.26

linux linux kernel 3.4.59

linux linux kernel 3.0.18

linux linux kernel 3.14.3

linux linux kernel 3.11.8

linux linux kernel 3.15.6

linux linux kernel 3.0.6

linux linux kernel 3.14.1

linux linux kernel 3.0.36

linux linux kernel 3.4.23

linux linux kernel 3.0.35

linux linux kernel 3.4.76

linux linux kernel 3.10.6

linux linux kernel 3.0.11

linux linux kernel 3.17.2

linux linux kernel 3.12.14

linux linux kernel 3.0.58

linux linux kernel 3.4.28

linux linux kernel 3.0.34

linux linux kernel 3.8.7

linux linux kernel 3.15.4

linux linux kernel 3.4.70

linux linux kernel 3.4.69

linux linux kernel 3.10.1

linux linux kernel 3.10.7

linux linux kernel 3.8.12

linux linux kernel 3.11.10

linux linux kernel 3.4.45

linux linux kernel 3.13.6

linux linux kernel 3.9.8

linux linux kernel 3.5.7

linux linux kernel 3.7.9

linux linux kernel 3.0.32

linux linux kernel 3.13.4

linux linux kernel 3.2

linux linux kernel 3.0.52

linux linux kernel 3.0.51

linux linux kernel 3.4.72

linux linux kernel 3.4.18

linux linux kernel 3.4.6

linux linux kernel 3.11.1

linux linux kernel 3.10.15

linux linux kernel 3.4.60

linux linux kernel 3.2.16

linux linux kernel 3.4.12

linux linux kernel 3.12.15

linux linux kernel 3.0.57

linux linux kernel 3.7.7

linux linux kernel 3.11

linux linux kernel 3.13

linux linux kernel 3.3.2

linux linux kernel 3.17.3

linux linux kernel 3.9.9

linux linux kernel 3.0.19

linux linux kernel 3.2.27

linux linux kernel 3.4.27

linux linux kernel 3.0.37

linux linux kernel 3.4.47

linux linux kernel 3.0.4

linux linux kernel 3.4.61

linux linux kernel 3.9.2

linux linux kernel 3.9

linux linux kernel 3.3.8

linux linux kernel 3.9.7

linux linux kernel 3.4.65

linux linux kernel 3.8.0

linux linux kernel 3.4.67

linux linux kernel 3.0.27

linux linux kernel 3.11.9

linux linux kernel 3.3.3

linux linux kernel 3.9.1

linux linux kernel 3.10.26

linux linux kernel 3.4.5

linux linux kernel 3.10

linux linux kernel 3.10.5

linux linux kernel 3.12.6

linux linux kernel 3.2.11

linux linux kernel 3.7.1

linux linux kernel 3.0.42

linux linux kernel 3.9.6

linux linux kernel 3.0.23

linux linux kernel 3.0.62

linux linux kernel 3.16.0

linux linux kernel 3.0.49

linux linux kernel 3.7.3

linux linux kernel 3.2.10

linux linux kernel 3.10.20

linux linux kernel 3.0.8

linux linux kernel 3.2.14

linux linux kernel 3.10.9

linux linux kernel 3.10.2

linux linux kernel 3.13.3

linux linux kernel 3.4.14

linux linux kernel 3.4.42

linux linux kernel 3.3.4

linux linux kernel 3.13.2

linux linux kernel 3.10.10

linux linux kernel 3.13.5

linux linux kernel 3.4.52

linux linux kernel 3.10.18

linux linux kernel 3.4.36

linux linux kernel 3.13.9

linux linux kernel 3.8.6

linux linux kernel 3.2.29

linux linux kernel 3.0.64

linux linux kernel 3.0.40

linux linux kernel 3.4.19

linux linux kernel 3.4.50

linux linux kernel 3.7

linux linux kernel 3.0.33

linux linux kernel 3.4.9

linux linux kernel 3.8.13

linux linux kernel 3.12.7

linux linux kernel 3.18

linux linux kernel 3.4.29

linux linux kernel 3.0.28

linux linux kernel 3.10.29

linux linux kernel 3.4.37

linux linux kernel 3.9.5

linux linux kernel 3.5.6

linux linux kernel 3.6.2

linux linux kernel 3.3.6

linux linux kernel 3.6.9

linux linux kernel 3.4.68

linux linux kernel 3.4.49

linux linux kernel 3.2.25

linux linux kernel

linux linux kernel 3.4.58

linux linux kernel 3.4.77

linux linux kernel 3.14.2

linux linux kernel 3.4.3

linux linux kernel 3.4.2

linux linux kernel 3.11.4

linux linux kernel 3.9.10

linux linux kernel 3.2.4

linux linux kernel 3.6.6

linux linux kernel 3.14.4

linux linux kernel 3.12.8

linux linux kernel 3.10.12

linux linux kernel 3.8.5

linux linux kernel 3.7.8

linux linux kernel 3.4.31

linux linux kernel 3.4.15

linux linux kernel 3.4.34

linux linux kernel 3.0.54

linux linux kernel 3.10.19

linux linux kernel 3.7.6

linux linux kernel 3.10.28

linux linux kernel 3.0.13

linux linux kernel 3.0.55

linux linux kernel 3.17

linux linux kernel 3.2.9

linux linux kernel 3.0.10

linux linux kernel 3.6.4

linux linux kernel 3.2.15

linux linux kernel 3.10.16

linux linux kernel 3.0.1

linux linux kernel 3.1.6

linux linux kernel 3.6.10

linux linux kernel 3.12.4

linux linux kernel 3.12.12

linux linux kernel 3.11.7

linux linux kernel 3.12.5

linux linux kernel 3.11.3

linux linux kernel 3.2.20

linux linux kernel 3.10.4

linux linux kernel 3.2.24

linux linux kernel 3.4.56

linux linux kernel 3.6.1

linux linux kernel 3.4.57

linux linux kernel 3.4.24

linux linux kernel 3.2.6

linux linux kernel 3.2.2

linux linux kernel 3.0.17

linux linux kernel 3.1.3

linux linux kernel 3.4.44

linux linux kernel 3.4.62

linux linux kernel 3.4.64

linux linux kernel 3.4.40

linux linux kernel 3.16.1

linux linux kernel 3.10.3

linux linux kernel 3.10.23

linux linux kernel 3.1.9

linux linux kernel 3.6

linux linux kernel 3.0.44

linux linux kernel 3.12.17

linux linux kernel 3.0.16

linux linux kernel 3.5.5

linux linux kernel 3.2.13

linux linux kernel 3.8.11

linux linux kernel 3.0.21

linux linux kernel 3.0.7

linux linux kernel 3.0.61

linux linux kernel 3.4.46

linux linux kernel 3.11.6

linux linux kernel 3.4.10

linux linux kernel 3.4.25

linux linux kernel 3.9.4

linux linux kernel 3.17.1

linux linux kernel 3.4.66

linux linux kernel 3.1.5

linux linux kernel 3.1.8

linux linux kernel 3.12.3

linux linux kernel 3.2.1

linux linux kernel 3.2.7

linux linux kernel 3.10.13

linux linux kernel 3.5.3

linux linux kernel 3.0.20

linux linux kernel 3.4.43

linux linux kernel 3.12.1

linux linux kernel 3.4.73

linux linux kernel 3.0.24

linux linux kernel 3.6.3

linux linux kernel 3.3.5

linux linux kernel 3.4.8

linux linux kernel 3.5.4

linux linux kernel 3.0.15

linux linux kernel 3.4.33

linux linux kernel 3.0.45

linux linux kernel 3.2.30

linux linux kernel 3.8.8

linux linux kernel 3.0.39

linux linux kernel 3.12.16

linux linux kernel 3.10.0

linux linux kernel 3.0.2

linux linux kernel 3.4.39

linux linux kernel 3.6.11

linux linux kernel 3.10.22

linux linux kernel 3.4.20

linux linux kernel 3.7.4

linux linux kernel 3.8.9

linux linux kernel 3.0.67

linux linux kernel 3.12.11

linux linux kernel 3.0.59

linux linux kernel 3.5.1

linux linux kernel 3.4.38

linux linux kernel 3.12.9

linux linux kernel 3.12.10

linux linux kernel 3.15.7

linux linux kernel 3.11.2

linux linux kernel 3.4.54

linux linux kernel 3.0.60

linux linux kernel 3.1.7

linux linux kernel 3.1.1

linux linux kernel 3.7.2

linux linux kernel 3.15.2

linux linux kernel 3.0.56

linux linux kernel 3.4.51

linux linux kernel 3.8.1

linux linux kernel 3.3.7

linux linux kernel 3.6.5

linux linux kernel 3.15

linux linux kernel 3.12.2

linux linux kernel 3.7.5

linux linux kernel 3.4.35

linux linux kernel 3.0.12

linux linux kernel 3.4.63

linux linux kernel 3.2.22

linux linux kernel 3.10.17

linux linux kernel 3.7.10

linux linux kernel 3.10.11

linux linux kernel 3.2.17

linux linux kernel 3.4.74

linux linux kernel 3.4.48

linux linux kernel 3.8.3

linux linux kernel 3.4.16

linux linux kernel 3.15.5

linux linux kernel 3.4.22

linux linux kernel 3.2.8

linux linux kernel 3.8.4

linux linux kernel 3.13.8

linux linux kernel 3.1.10

linux linux kernel 3.10.27

linux linux kernel 3.10.21

linux linux kernel 3.0.66

linux linux kernel 3.4.41

linux linux kernel 3.12.13

linux linux kernel 3.3.1

linux linux kernel 3.0.3

linux linux kernel 3.14.5

linux linux kernel 3.0.65

linux linux kernel 3.0.53

linux linux kernel 3.0.9

linux linux kernel 3.0.26

linux linux kernel 3.1.4

linux linux kernel 3.4.32

linux linux kernel 3.0.43

linux linux kernel 3.4.79

linux linux kernel 3.0.30

linux linux kernel 3.0.31

linux linux kernel 3.0.29

linux linux kernel 3.0.50

linux linux kernel 3.2.12

linux linux kernel 3.4.17

linux linux kernel 3.2.28

linux linux kernel 3.6.8

linux linux kernel 3.0.14

linux linux kernel 3.4.7

linux linux kernel 3.4.21

linux linux kernel 3.2.3

linux linux kernel 3.11.5

linux linux kernel 3.10.25

linux linux kernel 3.0.41

linux linux kernel 3.10.14

linux linux kernel 3.13.7

Vendor Advisories

Debian CVElist Bug Report Logs: linux: CVE-2014-9428: Remote crash of kernel via batman-adv module
Debian Bug report logs - #774155 linux: CVE-2014-9428: Remote crash of kernel via batman-adv module Package: linux; Maintainer for linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: conchur@webde Date: Mon, 29 Dec 2014 16:48:01 UTC Severity: important Tags: patch, security, upstream Found in versi ...
Debian Security Advisories: DSA-3128-1 linux -- security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or information leaks CVE-2013-6885 It was discovered that under specific circumstances, a combination of write operations to write-combined memory and locked CPU instructions may cause a core hang on AMD 16h 00h through 0Fh proces ...
Ubuntu Security Notice: linux vulnerabilities
USN-2516-1 introduced a regression in the Linux kernel ...
Ubuntu Security Notice: linux-lts-utopic vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux vulnerability
USN-2516-1 introduced a regression in the Linux kernel ...
Ubuntu Security Notice: linux vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux-lts-trusty vulnerabilities
USN-2515-1 introduced a regression in the Linux kernel ...
Ubuntu Security Notice: linux-ti-omap4 vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux-lts-trusty vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux vulnerabilities
Several security issues were fixed in the kernel ...
Ubuntu Security Notice: linux-ec2 vulnerabilities
Several security issues were fixed in the kernel ...
Red Hat: CVE-2014-8133
It was found that the espfix functionality could be bypassed by installing a 16-bit RW data segment into GDT instead of LDT (which espfix checks), and using that segment on the stack A local, unprivileged user could potentially use this flaw to leak kernel stack addresses ...

References

CWE-264http://www.openwall.com/lists/oss-security/2014/12/15/6https://bugzilla.redhat.com/show_bug.cgi?id=1172797https://github.com/torvalds/linux/commit/41bdc78544b8a93a9c6814b8bbbfef966272abbehttp://www.securityfocus.com/bid/71684http://secunia.com/advisories/62801http://www.ubuntu.com/usn/USN-2516-1http://www.ubuntu.com/usn/USN-2517-1http://www.ubuntu.com/usn/USN-2492-1http://www.ubuntu.com/usn/USN-2518-1http://www.ubuntu.com/usn/USN-2515-1http://www.ubuntu.com/usn/USN-2493-1http://www.ubuntu.com/usn/USN-2490-1http://www.ubuntu.com/usn/USN-2491-1http://www.debian.org/security/2015/dsa-3128http://www.mandriva.com/security/advisories?name=MDVSA-2015:058http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1272.htmlhttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=41bdc78544b8a93a9c6814b8bbbfef966272abbehttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774155https://nvd.nist.govhttps://usn.ubuntu.com/2516-3/https://access.redhat.com/security/cve/cve-2014-8133https://www.debian.org/security/./dsa-3128
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook