PT-2016-3428 · Linux+5 · Linux Kernel+5
Publicado
2016-08-31
·
Atualizado
2020-04-08
·
CVE-2019-11190
CVSS v3.1
4.7
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.8
Description
The issue is related to a race condition in the load elf binary() function in fs/binfmt elf.c, which allows local users to bypass Address Space Layout Randomization (ASLR) on setuid programs. This is due to the install exec creds() function being called too late, resulting in a race condition when reading /proc/pid/stat. The vulnerability can be exploited to bypass ASLR and potentially disclose sensitive information.
Recommendations
For Linux kernel versions prior to 4.8, update to version 4.8 or later to resolve the issue. As a temporary workaround, consider restricting access to setuid programs, such as /bin/su, to minimize the risk of exploitation.
Exploit
Correção
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu