6.2

CVE-2014-4014

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.14.8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.3% 0.869
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=23adbe12ef7d3d4195e80800ab36b37bee28cd03
http://secunia.com/advisories/59220
Third Party Advisory
http://www.exploit-db.com/exploits/33824
Third Party Advisory
VDB Entry
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8
Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/06/10/4
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/67988
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030394
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1107966
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03
Third Party Advisory
https://source.android.com/security/bulletin/2016-12-01.html
Third Party Advisory