PT-2014-6346 · Linux+3 · Linux Kernel+3

Published 2014-08-13 · Updated 2020-08-14 · CVE-2014-5207

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.16.1

Description The issue allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service via a "mount -o remount" command within a user namespace. This is due to the improper restriction of clearing MNT NODEV, MNT NOSUID, and MNT NOEXEC and changing MNT ATIME MASK during a remount of a bind mount.

Recommendations For Linux kernel versions through 3.16.1, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.

Exploit

Fix

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

ALT-PU-2014-2023

ALT-PU-2014-2024

ALT-PU-2014-2025

ALT-PU-2014-2106

ALT-PU-2015-1794

CVE-2014-5207

OPENSUSE-SU-2014_1677-1

USN-2317-1

USN-2318-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 32

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• 🔥 http://packetstormsecurity.com/files/128595/Linux-Kernel-3.16.1-FUSE-Privilege-Escalation.html · Exploit
• 🔥 http://exploit-db.com/exploits/34923 · Exploit
• 🔥 https://exploit-db.com/exploits/34923 · Exploit
• https://github.com/torvalds/linux/commit/9566d6742852c527bf5af38af5cbb878dad75705 · Patch
• https://ubuntu.com/security/CVE-2014-5207 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2318-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1129662 · Patch
• https://ubuntu.com/security/notices/USN-2317-1 · Vendor Advisory