PT-2015-7572 · Linux+5 · Linux Kernel+5

Dmitry Vyukov · Publicado 2015-10-02 · Atualizado 2024-07-17 · CVE-2015-7613

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.2.3

Description A race condition exists in the IPC object implementation, allowing local users to gain privileges. This occurs when an ipc addid call is triggered, leading to comparisons of uid and gid against uninitialized data. The issue is related to the msg.c, shm.c, and util.c files.

Recommendations For Linux kernel versions through 4.2.3, update to a version later than 4.2.3 to resolve the issue. As a temporary workaround, consider restricting access to the IPC object implementation to minimize the risk of exploitation.

Exploit

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2015-1924

ALT-PU-2016-1485

CESA-2015_2152

CESA-2015_2636

CVE-2015-7613

DLA-325-1

DSA-3372-1

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015:2587

RHSA-2015:2636

RHSA-2015_2152

RHSA-2015_2411

RHSA-2015_2636

SUSE-SU-2015:1727-1

SUSE-SU-2015:2084-1

SUSE-SU-2015:2085-1

SUSE-SU-2015:2086-1

SUSE-SU-2015:2087-1

SUSE-SU-2015:2089-1

SUSE-SU-2015:2090-1

SUSE-SU-2015:2091-1

USN-2761-1

USN-2762-1

USN-2763-1

USN-2764-1

USN-2765-1

USN-2792-1

USN-2796-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

Referências · 133

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/whu-enjoy/CVE-2015-8660 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2015/10/01/8 · Exploit
• https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf · Nota
• https://github.com/torvalds/linux/commit/b9a532277938 · Nota
• http://ubuntu.com/usn/USN-2792-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2764-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5156 · Nota
• https://osv.dev/vulnerability/USN-2765-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2015/suse-su-20152086-1 · Nota
• https://bugzilla.suse.com/938550 · Nota
• https://bugzilla.suse.com/912183 · Nota
• https://bugzilla.suse.com/941305 · Nota