5.5

CVE-2014-7970

Exploit
The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Suse Linux Enterprise Server Version11.0 Updatesp3
Linux ≫ Linux Kernel Version <= 3.17
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.472
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/60174
Broken Link
http://www.ubuntu.com/usn/USN-2419-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2420-1
Third Party Advisory
http://secunia.com/advisories/61142
Broken Link
http://www.openwall.com/lists/oss-security/2014/10/08/21
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/70319
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030991
Third Party Advisory
VDB Entry
http://www.spinics.net/lists/linux-fsdevel/msg79153.html
Patch
Third Party Advisory
Exploit
Mailing List
http://www.ubuntu.com/usn/USN-2513-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2514-1
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1842
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2077
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1151095
Patch
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/96921
Third Party Advisory
VDB Entry
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d0826019e529f21c84687521d03f60cd241ca7d
Patch
Vendor Advisory
Mailing List