PT-2015-3686 · Pcmanager+1 · Pcmanager+1

Serge Hallyn · Publicado 2015-01-06 · Atualizado 2015-01-08 · CVE-2014-1425

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions cmanager version 0.32

Description The issue is related to the improper enforcement of nesting when modifying cgroup properties. This allows local users to set cgroup values for all cgroups, potentially leading to unauthorized access or modifications.

Recommendations For cmanager version 0.32, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-1425

USN-2451-1

Produtos afetados

Ubuntu

Pcmanager

Referências · 8

• https://ubuntu.com/security/notices/USN-2451-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1425 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-1425 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2451-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2014-1425 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-1425 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-1425 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2451-1 · Aviso do Fabricante