CVE-2014-9585
UnknownEPSS 0.56%
Last modified
CVE-2014-9585 is a vulnerability of currently unknown severity. The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | <= 3.18.2 | — |
| Redhat | Enterprise Linux Aus | 6.6 | — |
| Redhat | Enterprise Linux Desktop | 6.0 | — |
| Redhat | Enterprise Linux Desktop | 7.0 | — |
| Redhat | Enterprise Linux Eus | 6.6 | — |
| Redhat | Enterprise Linux Server | 6.0 | — |
| Redhat | Enterprise Linux Server | 7.0 | — |
| Redhat | Enterprise Linux Server Aus | 7.3 | — |
| Redhat | Enterprise Linux Server Aus | 7.4 | — |
| Redhat | Enterprise Linux Server Aus | 7.6 | — |
| Redhat | Enterprise Linux Server Aus | 7.7 | — |
| Redhat | Enterprise Linux Server Eus | 7.1 | — |
| Redhat | Enterprise Linux Server Eus | 7.2 | — |
| Redhat | Enterprise Linux Server Eus | 7.3 | — |
| Redhat | Enterprise Linux Server Eus | 7.4 | — |
| Redhat | Enterprise Linux Server Eus | 7.5 | — |
| Redhat | Enterprise Linux Server Eus | 7.6 | — |
| Redhat | Enterprise Linux Server Eus | 7.7 | — |
| Redhat | Enterprise Linux Server Tus | 6.6 | — |
| Redhat | Enterprise Linux Server Tus | 7.3 | — |
| Redhat | Enterprise Linux Server Tus | 7.6 | — |
| Redhat | Enterprise Linux Server Tus | 7.7 | — |
| Redhat | Enterprise Linux Workstation | 6.0 | — |
| Redhat | Enterprise Linux Workstation | 7.0 | — |
| Opensuse | Evergreen | 11.4 | — |
| Opensuse | Opensuse | 13.1 | — |
| Suse | Linux Enterprise Desktop | 12 | — |
| Suse | Linux Enterprise Real Time Extension | 11 | Sp3 |
| Suse | Linux Enterprise Server | 11 | Sp1 |
| Suse | Linux Enterprise Server | 12 | — |
| Suse | Linux Enterprise Software Development Kit | 12 | — |
| Suse | Linux Enterprise Workstation Extension | 12 | — |
| Fedoraproject | Fedora | 21 | — |
| Debian | Debian Linux | 7.0 | — |
| Debian | Debian Linux | 8.0 | — |
| Canonical | Ubuntu Linux | 12.04 | — |
| Canonical | Ubuntu Linux | 14.04 | — |
| Canonical | Ubuntu Linux | 14.10 | — |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1081.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1778.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1787.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3170Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:058Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/12/09/10Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/01/09/8Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/71990Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2513-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2514-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2515-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2516-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2517-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2518-1Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1081.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1778.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1787.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3170Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:058Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/12/09/10Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/01/09/8Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/71990Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2513-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2514-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2515-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2516-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2517-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2518-1Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-9585?
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
How severe is CVE-2014-9585?
Severity scoring for CVE-2014-9585 is pending analysis. The EPSS model estimates a 0.56% probability of exploitation in the next 30 days.
How do I fix CVE-2014-9585?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2014-9585?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST