Linux Kernel ASLR Implementation Insufficient Entropy Weakness
BID:74264
Info
Linux Kernel ASLR Implementation Insufficient Entropy Weakness
| Bugtraq ID: | 74264 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 22 2015 12:00AM |
| Updated: | Apr 22 2015 12:00AM |
| Credit: | Hector Marco and Ismael Ripoll |
| Vulnerable: |
Linux Linux Kernel 3.16 Linux Linux Kernel 3.15.4 Linux Linux Kernel 3.15.2 Linux Linux Kernel 3.14.3 Linux Linux Kernel 3.13.7 Linux Linux Kernel 3.13.5 Linux Linux Kernel 3.13.1 Linux Linux Kernel 3.12.8 Linux Linux Kernel 3.12.5 Linux Linux Kernel 3.12.2 Linux Linux Kernel 3.11.3 Linux Linux Kernel 3.11.1 Linux Linux Kernel 3.10.27 Linux Linux Kernel 3.10.7 Linux Linux Kernel 3.10.3 Linux Linux Kernel 3.10.2 Linux Linux Kernel 3.9.9 Linux Linux Kernel 3.8.11 Linux Linux Kernel 3.8.6 Linux Linux Kernel 3.7.10 Linux Linux Kernel 3.4.74 Linux Linux Kernel 3.4.73 Linux Linux Kernel 3.4.71 Linux Linux Kernel 3.4.59 Linux Linux Kernel 3.4.28 Linux Linux Kernel 3.4.27 Linux Linux Kernel 3.4.19 Linux Linux Kernel 3.4.15 Linux Linux Kernel 3.4.14 Linux Linux Kernel 3.4.13 Linux Linux Kernel 3.4.11 Linux Linux Kernel 3.3.8 Linux Linux Kernel 3.2.30 Linux Linux Kernel 3.2.27 Linux Linux Kernel 3.2.26 Linux Linux Kernel 3.2.18 Linux Linux Kernel 3.2.17 Linux Linux Kernel 3.1.4 Linux Linux Kernel 3.0.61 Linux Linux Kernel 3.0.41 Linux Linux Kernel 3.0.35 Linux Linux Kernel 3.0.33 Linux Linux Kernel 3.0.32 Linux Linux Kernel 3.0.24 Linux Linux Kernel 3.0.23 Linux Linux Kernel 3.9.6 Linux Linux Kernel 3.9.3 Linux Linux Kernel 3.9.1 Linux Linux Kernel 3.9 Rc6 Linux Linux Kernel 3.9 Rc5 Linux Linux Kernel 3.9 Rc4 Linux Linux Kernel 3.8.5 Linux Linux Kernel 3.8.3 Linux Linux Kernel 3.8.1 Linux Linux Kernel 3.7.9 Linux Linux Kernel 3.7.2 Linux Linux Kernel 3.7 Linux Linux Kernel 3.6.9 Linux Linux Kernel 3.6.7 Linux Linux Kernel 3.6.10 Linux Linux Kernel 3.6 Linux Linux Kernel 3.5.7 Linux Linux Kernel 3.5.6 Linux Linux Kernel 3.5.2 Linux Linux Kernel 3.4.9 Linux Linux Kernel 3.4.8 Linux Linux Kernel 3.4.79 Linux Linux Kernel 3.4.77 Linux Linux Kernel 3.4.75 Linux Linux Kernel 3.4.69 Linux Linux Kernel 3.4.67 Linux Linux Kernel 3.4.65 Linux Linux Kernel 3.4.63 Linux Linux Kernel 3.4.61 Linux Linux Kernel 3.4.57 Linux Linux Kernel 3.4.55 Linux Linux Kernel 3.4.53 Linux Linux Kernel 3.4.52 Linux Linux Kernel 3.4.51 Linux Linux Kernel 3.4.49 Linux Linux Kernel 3.4.47 Linux Linux Kernel 3.4.45 Linux Linux Kernel 3.4.43 Linux Linux Kernel 3.4.41 Linux Linux Kernel 3.4.4 Linux Linux Kernel 3.4.39 Linux Linux Kernel 3.4.37 Linux Linux Kernel 3.4.35 Linux Linux Kernel 3.4.33 Linux Linux Kernel 3.4.3 Linux Linux Kernel 3.4.29 Linux Linux Kernel 3.4.1 Linux Linux Kernel 3.4 Rc6 Linux Linux Kernel 3.4 Rc5 Linux Linux Kernel 3.4 Rc2 Linux Linux Kernel 3.4 Rc1 Linux Linux Kernel 3.4 Linux Linux Kernel 3.3.6 Linux Linux Kernel 3.3.3 Linux Linux Kernel 3.3 Rc6 Linux Linux Kernel 3.3 Rc3 Linux Linux Kernel 3.3 Rc2 Linux Linux Kernel 3.3 Rc1 Linux Linux Kernel 3.2.5 Linux Linux Kernel 3.2.3 Linux Linux Kernel 3.2.2 Linux Linux Kernel 3.2 Rc7 Linux Linux Kernel 3.2 Rc5 Linux Linux Kernel 3.2 Rc2 Linux Linux Kernel 3.2 Linux Linux Kernel 3.18.3 Linux Linux Kernel 3.15.7 Linux Linux Kernel 3.15.6 Linux Linux Kernel 3.15 Linux Linux Kernel 3.14.5 Linux Linux Kernel 3.14.1 Linux Linux Kernel 3.14.0-rc3 Linux Linux Kernel 3.14-rc5 Linux Linux Kernel 3.14 Rc8 Linux Linux Kernel 3.14 Rc6 Linux Linux Kernel 3.14 Rc4 Linux Linux Kernel 3.14 Rc2 Linux Linux Kernel 3.14 - Linux Linux Kernel 3.13.8 Linux Linux Kernel 3.13.6 Linux Linux Kernel 3.13.3 Linux Linux Kernel 3.13.11 Linux Linux Kernel 3.12.9 Linux Linux Kernel 3.12.6 Linux Linux Kernel 3.12.17 Linux Linux Kernel 3.12.15 Linux Linux Kernel 3.12.12 Linux Linux Kernel 3.12.1 Linux Linux Kernel 3.11.7 Linux Linux Kernel 3.11.5 Linux Linux Kernel 3.11 Linux Linux Kernel 3.10.29 Linux Linux Kernel 3.10.25 Linux Linux Kernel 3.10.24 Linux Linux Kernel 3.10.18 Linux Linux Kernel 3.10.17 Linux Linux Kernel 3.10.16 Linux Linux Kernel 3.10.15 Linux Linux Kernel 3.10.12 Linux Linux Kernel 3.10.11 Linux Linux Kernel 3.10.1 Linux Linux Kernel 3.10 Linux Linux Kernel 3.1.8 Linux Linux Kernel 3.1.7 Linux Linux Kernel 3.1.5 Linux Linux Kernel 3.1.10 Linux Linux Kernel 3.1 Rc4 Linux Linux Kernel 3.1 Rc1 Linux Linux Kernel 3.0.9 Linux Linux Kernel 3.0.8 Linux Linux Kernel 3.0.7 Linux Linux Kernel 3.0.67 Linux Linux Kernel 3.0.66 Linux Linux Kernel 3.0.64 Linux Linux Kernel 3.0.63 Linux Linux Kernel 3.0.62 Linux Linux Kernel 3.0.57 Linux Linux Kernel 3.0.53 Linux Linux Kernel 3.0.51 Linux Linux Kernel 3.0.50 Linux Linux Kernel 3.0.49 Linux Linux Kernel 3.0.38 Linux Linux Kernel 3.0.3 Linux Linux Kernel 3.0.21 Linux Linux Kernel 3.0.19 Linux Linux Kernel 3.0 Rc7 Linux Linux Kernel 3.0 Rc4 Linux Linux Kernel 3.0 Rc2 Linux Linux Kernel 3.0 Rc1 Linux kernel 3.19.3 Linux kernel 3.18.11 Linux kernel 3.18.2 Linux kernel 3.18.1 Linux kernel 3.17.4 Linux kernel 3.17.2 Linux kernel 3.16.7 Linux kernel 3.16.2 Linux kernel 3.16.1 Linux kernel 3.15.5 Linux kernel 3.15.2 Linux kernel 3.14.37 Linux kernel 3.14.4 Linux kernel 3.14.3 Linux kernel 3.14.2 Linux kernel 3.13.11 Linux kernel 3.13.9 Linux kernel 3.13.3 Linux kernel 3.13.1 Linux kernel 3.12.40 Linux kernel 3.12.21 Linux kernel 3.12.18 Linux kernel 3.12.17 Linux kernel 3.12.16 Linux kernel 3.12.11 Linux kernel 3.12.7 Linux kernel 3.12.4 Linux kernel 3.12.3 Linux kernel 3.12.2 Linux kernel 3.11.3 Linux kernel 3.10.73 Linux kernel 3.10.45 Linux kernel 3.10.41 Linux kernel 3.10.38 Linux kernel 3.10.37 Linux kernel 3.10.36 Linux kernel 3.10.30 Linux kernel 3.10.27 Linux kernel 3.10.26 Linux kernel 3.10.23 Linux kernel 3.10.22 Linux kernel 3.10.21 Linux kernel 3.10.14 Linux kernel 3.10.10 Linux kernel 3.10.9 Linux kernel 3.10.7 Linux kernel 3.8.9 Linux kernel 3.8.6 Linux kernel 3.8.5 Linux kernel 3.8.4 Linux kernel 3.8.2 Linux kernel 3.8.1 Linux kernel 3.7.10 Linux kernel 3.7.9 Linux kernel 3.7.8 Linux kernel 3.7.7 Linux kernel 3.7.5 Linux kernel 3.7.4 Linux kernel 3.7.3 Linux kernel 3.7.2 Linux kernel 3.7.1 Linux kernel 3.6.11 Linux kernel 3.6.10 Linux kernel 3.6.9 Linux kernel 3.6.8 Linux kernel 3.6.7 Linux kernel 3.6.6 Linux kernel 3.6.5 Linux kernel 3.6.4 Linux kernel 3.6.3 Linux kernel 3.6.2 Linux kernel 3.6.1 Linux kernel 3.5.7 Linux kernel 3.5.6 Linux kernel 3.5.5 Linux kernel 3.5.4 Linux kernel 3.5.3 Linux kernel 3.5.2 Linux kernel 3.5.1 Linux kernel 3.4.88 Linux kernel 3.4.87 Linux kernel 3.4.86 Linux kernel 3.4.80 Linux kernel 3.4.76 Linux kernel 3.4.73 Linux kernel 3.4.72 Linux kernel 3.4.71 Linux kernel 3.4.64 Linux kernel 3.4.58 Linux kernel 3.4.42 Linux kernel 3.4.36 Linux kernel 3.4.32 Linux kernel 3.4.31 Linux kernel 3.4.27 Linux kernel 3.4.26 Linux kernel 3.4.25 Linux kernel 3.4.21 Linux kernel 3.4.20 Linux kernel 3.4.19 Linux kernel 3.4.18 Linux kernel 3.4.17 Linux kernel 3.4.16 Linux kernel 3.4.15 Linux kernel 3.4.14 Linux kernel 3.4.13 Linux kernel 3.4.12 Linux kernel 3.4.11 Linux kernel 3.4.10 Linux kernel 3.4.9 Linux kernel 3.4.8 Linux kernel 3.4.7 Linux kernel 3.4.6 Linux kernel 3.4.5 Linux kernel 3.4.4 Linux kernel 3.4.3 Linux kernel 3.4.2 Linux kernel 3.4.1 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.62 Linux kernel 3.2.57 Linux kernel 3.2.56 Linux kernel 3.2.51 Linux kernel 3.2.24 Linux kernel 3.2.23 Linux kernel 3.2.13 Linux kernel 3.2.12 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.98 Linux kernel 3.0.75 Linux kernel 3.0.72 Linux kernel 3.0.69 Linux kernel 3.0.65 Linux kernel 3.0.60 Linux kernel 3.0.59 Linux kernel 3.0.58 Linux kernel 3.0.37 Linux kernel 3.0.34 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 4.0 Linux kernel 3.9.8 Linux kernel 3.9.4 Linux kernel 3.9-rc8 Linux kernel 3.9-rc7 Linux kernel 3.9-rc3 Linux kernel 3.9 Linux kernel 3.8-rc1 Linux kernel 3.8 Linux kernel 3.7.6 Linux kernel 3.7-rc1 Linux kernel 3.7 Linux kernel 3.6 Linux kernel 3.5 Linux kernel 3.4.93 Linux kernel 3.4.81 Linux kernel 3.4.70 Linux kernel 3.4.67 Linux kernel 3.4.29 Linux kernel 3.4 Linux kernel 3.3 Linux kernel 3.2.65 Linux kernel 3.2.64 Linux kernel 3.2.63 Linux kernel 3.2.60 Linux kernel 3.2.55 Linux kernel 3.2.54 Linux kernel 3.2.53 Linux kernel 3.2.52 Linux kernel 3.2.50 Linux kernel 3.2.44 Linux kernel 3.2.42 Linux kernel 3.2.38 Linux kernel 3.2.2 Linux kernel 3.2 Linux kernel 3.19-rc7 Linux kernel 3.19-rc2 Linux kernel 3.19-rc Linux kernel 3.19 Linux kernel 3.18 Linux kernel 3.17.6 Linux kernel 3.17-rc3 Linux kernel 3.17 Linux kernel 3.16.7-ckt9-2 Linux kernel 3.16.7-ckt7-1 Linux kernel 3.16.7-ckt2-1 Linux kernel 3.16.6 Linux kernel 3.16 Linux kernel 3.15-rc3 Linux kernel 3.15-rc2 Linux kernel 3.15-rc1 Linux kernel 3.15 Linux kernel 3.14.7 Linux kernel 3.14.5 Linux kernel 3.14-rc7 Linux kernel 3.14-rc4 Linux kernel 3.14-4 Linux kernel 3.14-1 Linux kernel 3.14 Linux kernel 3.13.7 Linux kernel 3.13.6 Linux kernel 3.13.5 Linux kernel 3.13.4 Linux kernel 3.13.0 Linux kernel 3.13-rc1 Linux kernel 3.13 Linux kernel 3.12.22 Linux kernel 3.12.15 Linux kernel 3.12.14 Linux kernel 3.12.12 Linux kernel 3.12.1 Linux kernel 3.12 Linux kernel 3.11.9 Linux kernel 3.11.6 Linux kernel 3.11-rc7 Linux kernel 3.11-rc4 Linux kernel 3.11-rc1 Linux kernel 3.11 Linux kernel 3.10.5 Linux kernel 3.10.43 Linux kernel 3.10.31 Linux kernel 3.10.20 Linux kernel 3.10.17 Linux kernel 3.10-rc5 Linux kernel 3.10 Linux kernel 3.1 Linux kernel 3.0.66 Linux kernel 3.0.62 Linux kernel 3.0.18 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 3.0 |
| Not Vulnerable: | |
Discussion
Linux Kernel ASLR Implementation Insufficient Entropy Weakness
Linux Kernel is prone to an entropy weakness.
Attackers can exploit this issue with brute-force techniques to bypass intended security restrictions. which may aid in launching certain types of code execution vulnerabilities.
Linux Kernel is prone to an entropy weakness.
Attackers can exploit this issue with brute-force techniques to bypass intended security restrictions. which may aid in launching certain types of code execution vulnerabilities.
Exploit / POC
Linux Kernel ASLR Implementation Insufficient Entropy Weakness
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel ASLR Implementation Insufficient Entropy Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel ASLR Implementation Insufficient Entropy Weakness
References:
References:
- AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5% (Hector Marco)
- AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5% (Hector Marco & Ismael Ripoll)
- Linux kernel Homepage (kernel.org)