NVD Vulnerability Detail

CVE-2014-9645

Summary	The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
Publication Date	March 12, 2017, 3:59 p.m.
Registration Date	Jan. 26, 2021, 3:22 p.m.
Last Update	Nov. 21, 2024, 11:21 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:busybox:busybox::::::::			1.22.1

Related information, measures and tools

No	URL	タグ
1	http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b	Issue Tracking Patch Third Party Advisory
2	http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b	Issue Tracking Patch Third Party Advisory
3	http://openwall.com/lists/oss-security/2015/01/24/4	Mailing List Patch Third Party Advisory
4	http://openwall.com/lists/oss-security/2015/01/24/4	Mailing List Patch Third Party Advisory
5	http://seclists.org/fulldisclosure/2020/Mar/15
6	http://seclists.org/fulldisclosure/2020/Mar/15
7	http://www.securityfocus.com/bid/72324
8	http://www.securityfocus.com/bid/72324
9	https://bugs.busybox.net/show_bug.cgi?id=7652	Issue Tracking
10	https://bugs.busybox.net/show_bug.cgi?id=7652	Issue Tracking
11	https://bugzilla.redhat.com/show_bug.cgi?id=1185707	Issue Tracking
12	https://bugzilla.redhat.com/show_bug.cgi?id=1185707	Issue Tracking
13	https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
14	https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
15	https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu	Patch Third Party Advisory
16	https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu	Patch Third Party Advisory
17	https://security.gentoo.org/glsa/201503-13
18	https://security.gentoo.org/glsa/201503-13
19	https://usn.ubuntu.com/3935-1/
20	https://usn.ubuntu.com/3935-1/

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

BusyBox の modutils/modprobe.c の add_probe 関数におけるカーネルモジュールのロードの制限を回避される脆弱性

Title	BusyBox の modutils/modprobe.c の add_probe 関数におけるカーネルモジュールのロードの制限を回避される脆弱性
Summary	BusyBox の modutils/modprobe.c の add_probe 関数には、カーネルモジュールのロードの制限を回避される脆弱性が存在します。
Possible impacts	ローカルユーザにより、/ (スラッシュ) 文字を含むモジュール名を介して、カーネルモジュールのロードの制限を回避される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 20, 2014, midnight
Registration Date	April 6, 2017, 5:47 p.m.
Last Update	April 6, 2017, 5:47 p.m.

Affected System

BusyBox

BusyBox 1.23.0 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-9645	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9645
National Vulnerability Database (NVD)
2	CVE-2014-9645	https://nvd.nist.gov/vuln/detail/CVE-2014-9645

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Bugzilla
1	Bug 7652	https://bugs.busybox.net/show_bug.cgi?id=7652
BusyBox
2	modprobe,rmmod: reject module names with slashes	https://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b
Red Hat Bugzilla
3	Bug 1185707	https://bugzilla.redhat.com/show_bug.cgi?id=1185707

Change Log

No	Changed Details	Date of change
0	[2017年04月06日] 掲載	Feb. 17, 2018, 10:37 a.m.