Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3153
HistoryJun 07, 2014 - 2:55 p.m.

CVE-2014-3153

2014-06-0714:55:27
CWE-269
[email protected]
web.nvd.nist.gov
907
In Wild
17
cve-2014-3153
linux kernel
futex_requeue
privilege escalation
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.2.60
OR
linuxlinux_kernelRange3.3–3.4.92
OR
linuxlinux_kernelRange3.5–3.10.42
OR
linuxlinux_kernelRange3.11–3.12.22
OR
linuxlinux_kernelRange3.13–3.14.6
Node
redhatenterprise_linux_server_ausMatch6.2
Node
opensuseopensuseMatch11.4
OR
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_high_availability_extensionMatch11sp3
OR
suselinux_enterprise_real_time_extensionMatch11sp3
OR
suselinux_enterprise_serverMatch11-
OR
suselinux_enterprise_serverMatch11sp2ltss
OR
suselinux_enterprise_serverMatch11sp3-
OR
suselinux_enterprise_serverMatch11sp3vmware

References

Social References

More

Related

openvas 57
threatpost 6
altlinux 3
cvelist 1
prion 1
amazon 2
debiancve 1
oraclelinux 6
nessus 37
suse 10
exploitpack 1
metasploit 1
canvas 1
ubuntu 10
packetstorm 1
cloudfoundry 1
securityvulns 2
ubuntucve 1
saint 4
android 1
attackerkb 1
zdt 2
hackerone 1
cisa_kev 1
nvd 1
thn 5
exploitdb 1
chrome 1
osv 3
redhat 6
mageia 8
debian 3
securelist 1
centos 1
veracode 7
kitploit 1
fedora 9
openvas
openvas
Oracle: Security Advisory (ELSA-2014-3037)
2015-10-06 00:00:00
openSUSE: Security Advisory for kernel (openSUSE-SU-2014:0878-1)
2014-07-15 00:00:00
SUSE: Security Advisory for Linux (SUSE-SU-2014:0775-1)
2015-10-13 00:00:00
threatpost
threatpost
CopyCat Malware Infected 14M Android Devices, Rooted 8M, in 2016
2017-07-06 13:49:02
Android Ransomware Attacks Using Towelroot, Hacking Team Exploits
2016-04-25 15:36:33
Google Play Hit With Rash of Auto-Rooting Malware
2016-06-28 12:29:57
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-un-def version 1:3.14.5-alt2
2014-06-06 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt23
2014-06-09 00:00:00
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2014-06-21 00:00:00
cvelist
cvelist
CVE-2014-3153
2014-06-07 14:00:00
prion
prion
Command injection
2014-06-07 14:55:00
amazon
amazon
Medium: kernel
2014-06-15 16:30:00
Medium: kernel
2014-08-21 11:03:00
debiancve
debiancve
CVE-2014-3153
2014-06-07 14:55:27
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-06-07 00:00:00
unbreakable enterprise kernel security update
2014-06-07 00:00:00
Unbreakable Enterprise kernel security update
2014-06-06 00:00:00
nessus
nessus
Ubuntu 12.04 LTS : linux-lts-quantal vulnerability (USN-2237-1)
2014-06-06 00:00:00
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3039)
2014-06-09 00:00:00
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3038)
2014-06-09 00:00:00
suse
suse
Security update for Linux Kernel (important)
2014-06-14 02:04:20
Security update for Linux Kernel (important)
2014-06-24 20:04:13
Security update for Linux Kernel (critical)
2014-06-11 05:04:34
exploitpack
exploitpack
Linux Kernel 3.14.5 (CentOS 7 RHEL) - libfutex Local Privilege Escalation
2014-11-25 00:00:00
metasploit
metasploit
Android 'Towelroot' Futex Requeue Kernel Exploit
2014-12-01 03:49:22
canvas
canvas
Immunity Canvas: LINUX_FUTEX_REQUEUE
2014-06-07 14:55:00
ubuntu
ubuntu
Linux kernel (Quantal HWE) vulnerability
2014-06-05 00:00:00
Linux kernel (Raring HWE) vulnerabilities
2014-06-05 00:00:00
Linux kernel vulnerabilities
2014-06-05 00:00:00
packetstorm
packetstorm
Android Futex Requeue Kernel Exploit
2015-02-09 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-3153 Futex requeue exploit | Cloud Foundry
2014-08-18 00:00:00
securityvulns
securityvulns
[oss-security] Linux kernel futex local privilege escalation &#40;CVE-2014-3153&#41;
2014-06-09 00:00:00
Linux privilege escalation
2014-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2014-3153
2014-06-05 00:00:00
saint
saint
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
android
android
TowelRoot
2014-06-05 00:00:00
attackerkb
attackerkb
CVE-2014-3153
2014-06-07 00:00:00
zdt
zdt
Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit
2014-11-26 00:00:00
Android Futex Requeue Kernel Exploit
2015-02-10 00:00:00
hackerone
hackerone
Sandbox Escape: Linux PI futex self-requeue bug
2014-05-26 05:00:49
cisa_kev
cisa_kev
Linux Kernel Privilege Escalation Vulnerability
2022-05-25 00:00:00
nvd
nvd
CVE-2014-3153
2014-06-07 14:55:27
thn
thn
Towelroot : One-Click Android Rooting Tool Released By Geohot
2014-06-17 22:49:00
Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware
2016-11-30 05:44:00
CopyCat Android Rooting Malware Infected 14 Million Devices
2017-07-06 05:17:00
exploitdb
exploitdb
Linux Kernel 3.14.5 (CentOS 7 / RHEL) - &#039;libfutex&#039; Local Privilege Escalation
2014-11-25 00:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2014-06-10 00:00:00
osv
osv
linux-2.6 - security update
2014-06-18 00:00:00
linux - security update
2014-06-05 00:00:00
openssl - security update
2014-06-05 00:00:00
redhat
redhat
(RHSA-2014:0800) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0900) Important: kernel security and bug fix update
2014-07-17 00:00:00
(RHSA-2014:0771) Important: kernel security and bug fix update
2014-06-19 00:00:00
mageia
mageia
Updated kernel packages fixes security vulnerabilities.
2014-06-19 00:50:01
Updated kernel packages fixes security vulnerabilities
2014-06-23 01:13:23
Updated kernel-tmb package fixes security vulnerabilities
2014-08-18 13:14:56
debian
debian
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2950-1] openssl security update
2014-06-05 11:51:34
securelist
securelist
Skygofree: Following in the footsteps of HackingTeam
2018-01-16 10:00:58
centos
centos
kernel, perf, python security update
2014-06-20 10:10:41
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:37
Denial Of Service (DoS)
2019-05-02 05:03:36
Privilege Escalation
2019-05-02 05:03:36
kitploit
kitploit
Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework
2017-11-04 13:30:00
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10
[SECURITY] Fedora 20 Update: kernel-3.15.4-200.fc20
2014-07-11 02:02:48
[SECURITY] Fedora 20 Update: kernel-3.14.8-200.fc20
2014-06-18 22:25:48

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON
Related for CVE-2014-3153
openvas57threatpost6altlinux3cvelist1prion1amazon2debiancve1oraclelinux6nessus37suse10exploitpack1metasploit1canvas1ubuntu10packetstorm1cloudfoundry1securityvulns2ubuntucve1saint4android1attackerkb1zdt2hackerone1cisa_kev1nvd1thn5exploitdb1chrome1osv3redhat6mageia8debian3securelist1centos1veracode7kitploit1fedora9