PT-2016-3504 · Linux+2 · Linux Kernel+2

Publicado

2015-06-03

·

Atualizado

2016-08-12

·

CVE-2014-9717

CVSS v3.1

6.1

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.2
Description The issue allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace. This is due to the Linux kernel's failure to verify that the MNT LOCKED flag is unset when processing MNT DETACH umount2 system calls.
Recommendations For Linux kernel versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue.

Exploit

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2015-1485
ALT-PU-2015-1849
CVE-2014-9717
SUSE-SU-2016:1690-1
SUSE-SU-2016:1696-1
SUSE-SU-2016:1937-1
SUSE-SU-2016_1690-1
SUSE-SU-2016_1696-1

Produtos afetados

Alt Linux
Linux Kernel
Suse