CVEvulnerability
CVE-2014-0930
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Description
The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel memory via a crafted PT_LDINFO operation.
Affected configurations
• ibm vios 2.2.0.10
• ibm vios 2.2.0.11
• ibm vios 2.2.0.12
• ibm vios 2.2.0.13
• ibm vios 2.2.1.0
• ibm vios 2.2.1.1
• ibm vios 2.2.1.3
• ibm vios 2.2.1.4
• ibm vios 2.2.2.0
• ibm vios 2.2.3.0
• ibm aix 5.3
• ibm aix 6.1
• ibm aix 7.1
References
- http://aix.software.ibm.com/aix/efixes/security/ptrace_advisory.asc Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2014-05/0031.html archives.neohapsis.com
- http://www.ibm.com/support/docview.wss?uid=isg1IV58766 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58840 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58861 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58888 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58948 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV59045 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IV59675 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92262 exchange.xforce.ibmcloud.com
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0930/ Exploit
- http://aix.software.ibm.com/aix/efixes/security/ptrace_advisory.asc Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2014-05/0031.html archives.neohapsis.com
- http://www.ibm.com/support/docview.wss?uid=isg1IV58766 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58840 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58861 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58888 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV58948 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV59045 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IV59675 www.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92262 exchange.xforce.ibmcloud.com
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0930/ Exploit