User-Mode Linux Kernel Memory Access Vulnerability
BID:3973
Info
User-Mode Linux Kernel Memory Access Vulnerability
| Bugtraq ID: | 3973 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 25 2000 12:00AM |
| Updated: | Aug 25 2000 12:00AM |
| Credit: | Documented on the User-Mode Linux Homepage. Details on exploitation and problem posted to the BugTraq mailing list by "Andrew Griffiths" <[email protected]>. |
| Vulnerable: |
User-Mode Linux User-Mode Linux 2.4.17 -8 |
| Not Vulnerable: |
User-Mode Linux User-Mode Linux 2.4.17 -9 |
Discussion
User-Mode Linux Kernel Memory Access Vulnerability
User-Mode Linux (UML) is a patch which allows the Linux Kernel to run as a user space process. It is currently available for the Linux operating system. It may be used as an efficient tool for kernel development, as well as for virtual networking, honeypots, and experimentation.
UML does not correctly protect kernel address space from user programs within the UML environment. It may be possible to execute arbitrary code within the kernel and gain root access. Additionally, it may be possible to use this vulnerability to escape the UML environment, leading to local access on the hosting system.
This is a known problem with the current UML implementation. Memory protection may be partially implemented at this time.
User-Mode Linux (UML) is a patch which allows the Linux Kernel to run as a user space process. It is currently available for the Linux operating system. It may be used as an efficient tool for kernel development, as well as for virtual networking, honeypots, and experimentation.
UML does not correctly protect kernel address space from user programs within the UML environment. It may be possible to execute arbitrary code within the kernel and gain root access. Additionally, it may be possible to use this vulnerability to escape the UML environment, leading to local access on the hosting system.
This is a known problem with the current UML implementation. Memory protection may be partially implemented at this time.
Exploit / POC
User-Mode Linux Kernel Memory Access Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
The tool mpmt may be used to explore this vulnerability, and has been contributed by Andrew Griffiths <[email protected]>:
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
The tool mpmt may be used to explore this vulnerability, and has been contributed by Andrew Griffiths <[email protected]>:
Solution / Fix
User-Mode Linux Kernel Memory Access Vulnerability
Solution:
This vulnerability has been acknowledged by the User-Mode Linux team, and kernel memory protection should be fully implemented in a future version of the product.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
This vulnerability has been acknowledged by the User-Mode Linux team, and kernel memory protection should be fully implemented in a future version of the product.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
User-Mode Linux Kernel Memory Access Vulnerability
References:
References:
- User-Mode Linux Homepage (User-Mode Linux)
- User-Mode Linux Kernel Bugs Page (User-Mode Linux)