Actu
Vigil@nce - Linux kernel: information disclosure via KVM espfix
December 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can use espfix of the Linux kernel, in order to obtain
information about the memory layout to bypass ASLR.
– Impacted products: Linux, Ubuntu
– Severity: 1/4
– Creation date: 12/12/2014
DESCRIPTION OF THE VULNERABILITY
The Linux kernel implements "espfix" which handles memory pages.
However, a guest in a KVM PV 32 bits system can obtain the 16 top
bits of the address.
An attacker can therefore use espfix of the Linux kernel, in order
to obtain information about the memory layout to bypass ASLR.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Linux-kernel-information-disclosure-via-KVM-espfix-15787
