QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-4699

Back to search

CVE-2014-4699

Published: Jul 9, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-2269-1
vendor-advisory
x_refsource_UBUNTU
USN-2274-1
vendor-advisory
x_refsource_UBUNTU
USN-2268-1
vendor-advisory
x_refsource_UBUNTU
USN-2267-1
vendor-advisory
x_refsource_UBUNTU
108754
vdb-entry
x_refsource_OSVDB
60220
third-party-advisory
x_refsource_SECUNIA
USN-2271-1
vendor-advisory
x_refsource_UBUNTU
59654
third-party-advisory
x_refsource_SECUNIA
USN-2266-1
vendor-advisory
x_refsource_UBUNTU
59633
third-party-advisory
x_refsource_SECUNIA
60393
third-party-advisory
x_refsource_SECUNIA
60380
third-party-advisory
x_refsource_SECUNIA
USN-2270-1
vendor-advisory
x_refsource_UBUNTU
34134
exploit
x_refsource_EXPLOIT-DB
59639
third-party-advisory
x_refsource_SECUNIA
USN-2273-1
vendor-advisory
x_refsource_UBUNTU
USN-2272-1
vendor-advisory
x_refsource_UBUNTU
DSA-2972
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now