Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
BID:69779
Info
Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
| Bugtraq ID: | 69779 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-3181 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 25 2014 12:00AM |
| Updated: | Apr 13 2015 10:02PM |
| Credit: | Scvitti |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Thomas Lange Fully Automated Installation 3.16.1 SuSE Linux Enterprise Real Time Extension 11 SP3 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 Redhat MRG Realtime for RHEL 6 Server 2 Redhat Enterprise Linux Workstation Optional 7 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Server Optional 7 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux ComputeNode Optional 7 Redhat Enterprise Linux ComputeNode 7 Redhat Enterprise Linux Client Optional 7 Redhat Enterprise Linux Client 7 Oracle Linux 7 Oracle Linux 6 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Linux Linux Kernel 3.16 Linux kernel 3.16 IBM PowerKVM 2.1 CentOS CentOS 7 |
| Not Vulnerable: | |
Discussion
Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
Linux Kernel is prone to a stack-based buffer-overflow vulnerability.
A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code-execution may be possible; however this has not been confirmed.
Linux Kernel is prone to a stack-based buffer-overflow vulnerability.
A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code-execution may be possible; however this has not been confirmed.
Exploit / POC
Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva cpupower-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-firmware-3.4.104-1.1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-headers-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-server-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-server-devel-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva kernel-source-3.4.104-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cpupower-devel-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64cpupower0-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva perf-3.4.104-1.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Linux Kernel Magic Mouse HID Device Driver CVE-2014-3181 Stack-Based Buffer Overflow Vulnerability
References:
References: