CVE-2014-8989

Exploit

EPSS 0.03%
Published 30.11.2014 01:59:07
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 3.17.3

Linux ≫ Linux Kernel Version3.0 Updaterc1

Linux ≫ Linux Kernel Version3.0 Updaterc2

Linux ≫ Linux Kernel Version3.0 Updaterc3

Linux ≫ Linux Kernel Version3.0 Updaterc4

Linux ≫ Linux Kernel Version3.0 Updaterc5

Linux ≫ Linux Kernel Version3.0 Updaterc6

Linux ≫ Linux Kernel Version3.0 Updaterc7

Linux ≫ Linux Kernel Version3.0.1

Linux ≫ Linux Kernel Version3.0.2

Linux ≫ Linux Kernel Version3.0.3

Linux ≫ Linux Kernel Version3.0.4

Linux ≫ Linux Kernel Version3.0.5

Linux ≫ Linux Kernel Version3.0.6

Linux ≫ Linux Kernel Version3.0.7

Linux ≫ Linux Kernel Version3.0.8

Linux ≫ Linux Kernel Version3.0.9

Linux ≫ Linux Kernel Version3.0.10

Linux ≫ Linux Kernel Version3.0.11

Linux ≫ Linux Kernel Version3.0.12

Linux ≫ Linux Kernel Version3.0.13

Linux ≫ Linux Kernel Version3.0.14

Linux ≫ Linux Kernel Version3.0.15

Linux ≫ Linux Kernel Version3.0.16

Linux ≫ Linux Kernel Version3.0.17

Linux ≫ Linux Kernel Version3.0.18

Linux ≫ Linux Kernel Version3.0.19

Linux ≫ Linux Kernel Version3.0.20

Linux ≫ Linux Kernel Version3.0.21

Linux ≫ Linux Kernel Version3.0.22

Linux ≫ Linux Kernel Version3.0.23

Linux ≫ Linux Kernel Version3.0.24

Linux ≫ Linux Kernel Version3.0.25

Linux ≫ Linux Kernel Version3.0.26

Linux ≫ Linux Kernel Version3.0.27

Linux ≫ Linux Kernel Version3.0.28

Linux ≫ Linux Kernel Version3.0.29

Linux ≫ Linux Kernel Version3.0.30

Linux ≫ Linux Kernel Version3.0.31

Linux ≫ Linux Kernel Version3.0.32

Linux ≫ Linux Kernel Version3.0.33

Linux ≫ Linux Kernel Version3.0.34

Linux ≫ Linux Kernel Version3.0.35

Linux ≫ Linux Kernel Version3.0.36

Linux ≫ Linux Kernel Version3.0.37

Linux ≫ Linux Kernel Version3.0.38

Linux ≫ Linux Kernel Version3.0.39

Linux ≫ Linux Kernel Version3.0.40

Linux ≫ Linux Kernel Version3.0.41

Linux ≫ Linux Kernel Version3.0.42

Linux ≫ Linux Kernel Version3.0.43

Linux ≫ Linux Kernel Version3.0.44

Linux ≫ Linux Kernel Version3.0.45

Linux ≫ Linux Kernel Version3.0.46

Linux ≫ Linux Kernel Version3.0.47

Linux ≫ Linux Kernel Version3.0.48

Linux ≫ Linux Kernel Version3.0.49

Linux ≫ Linux Kernel Version3.0.50

Linux ≫ Linux Kernel Version3.0.51

Linux ≫ Linux Kernel Version3.0.52

Linux ≫ Linux Kernel Version3.0.53

Linux ≫ Linux Kernel Version3.0.54

Linux ≫ Linux Kernel Version3.0.55

Linux ≫ Linux Kernel Version3.0.56

Linux ≫ Linux Kernel Version3.0.57

Linux ≫ Linux Kernel Version3.0.58

Linux ≫ Linux Kernel Version3.0.59

Linux ≫ Linux Kernel Version3.0.60

Linux ≫ Linux Kernel Version3.0.61

Linux ≫ Linux Kernel Version3.0.62

Linux ≫ Linux Kernel Version3.0.63

Linux ≫ Linux Kernel Version3.0.64

Linux ≫ Linux Kernel Version3.0.65

Linux ≫ Linux Kernel Version3.0.66

Linux ≫ Linux Kernel Version3.0.67

Linux ≫ Linux Kernel Version3.0.68

Linux ≫ Linux Kernel Version3.1

Linux ≫ Linux Kernel Version3.1 Updaterc1

Linux ≫ Linux Kernel Version3.1 Updaterc2

Linux ≫ Linux Kernel Version3.1 Updaterc3

Linux ≫ Linux Kernel Version3.1 Updaterc4

Linux ≫ Linux Kernel Version3.1.1

Linux ≫ Linux Kernel Version3.1.2

Linux ≫ Linux Kernel Version3.1.3

Linux ≫ Linux Kernel Version3.1.4

Linux ≫ Linux Kernel Version3.1.5

Linux ≫ Linux Kernel Version3.1.6

Linux ≫ Linux Kernel Version3.1.7

Linux ≫ Linux Kernel Version3.1.8

Linux ≫ Linux Kernel Version3.1.9

Linux ≫ Linux Kernel Version3.1.10

Linux ≫ Linux Kernel Version3.2

Linux ≫ Linux Kernel Version3.2 HwPlatformx86

Linux ≫ Linux Kernel Version3.2 Updaterc2

Linux ≫ Linux Kernel Version3.2 Updaterc3

Linux ≫ Linux Kernel Version3.10

Linux ≫ Linux Kernel Version3.10.0 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.1

Linux ≫ Linux Kernel Version3.10.1 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.2

Linux ≫ Linux Kernel Version3.10.2 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.3

Linux ≫ Linux Kernel Version3.10.3 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.4

Linux ≫ Linux Kernel Version3.10.4 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.5

Linux ≫ Linux Kernel Version3.10.5 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.6

Linux ≫ Linux Kernel Version3.10.6 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.7

Linux ≫ Linux Kernel Version3.10.7 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.8

Linux ≫ Linux Kernel Version3.10.8 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.9

Linux ≫ Linux Kernel Version3.10.9 HwPlatformarm64

Linux ≫ Linux Kernel Version3.10.10

Linux ≫ Linux Kernel Version3.10.11

Linux ≫ Linux Kernel Version3.10.12

Linux ≫ Linux Kernel Version3.10.13

Linux ≫ Linux Kernel Version3.10.14

Linux ≫ Linux Kernel Version3.10.15

Linux ≫ Linux Kernel Version3.10.16

Linux ≫ Linux Kernel Version3.10.17

Linux ≫ Linux Kernel Version3.10.18

Linux ≫ Linux Kernel Version3.10.19

Linux ≫ Linux Kernel Version3.10.20

Linux ≫ Linux Kernel Version3.10.21

Linux ≫ Linux Kernel Version3.10.22

Linux ≫ Linux Kernel Version3.10.23

Linux ≫ Linux Kernel Version3.10.24

Linux ≫ Linux Kernel Version3.10.25

Linux ≫ Linux Kernel Version3.10.26

Linux ≫ Linux Kernel Version3.10.27

Linux ≫ Linux Kernel Version3.10.28

Linux ≫ Linux Kernel Version3.10.29

Linux ≫ Linux Kernel Version3.11

Linux ≫ Linux Kernel Version3.11.1

Linux ≫ Linux Kernel Version3.11.2

Linux ≫ Linux Kernel Version3.11.3

Linux ≫ Linux Kernel Version3.11.4

Linux ≫ Linux Kernel Version3.11.5

Linux ≫ Linux Kernel Version3.11.6

Linux ≫ Linux Kernel Version3.11.7

Linux ≫ Linux Kernel Version3.11.8

Linux ≫ Linux Kernel Version3.11.9

Linux ≫ Linux Kernel Version3.11.10

Linux ≫ Linux Kernel Version3.12

Linux ≫ Linux Kernel Version3.12.1

Linux ≫ Linux Kernel Version3.12.2

Linux ≫ Linux Kernel Version3.12.3

Linux ≫ Linux Kernel Version3.12.4

Linux ≫ Linux Kernel Version3.12.5

Linux ≫ Linux Kernel Version3.12.6

Linux ≫ Linux Kernel Version3.12.7

Linux ≫ Linux Kernel Version3.12.8

Linux ≫ Linux Kernel Version3.12.9

Linux ≫ Linux Kernel Version3.12.10

Linux ≫ Linux Kernel Version3.12.11

Linux ≫ Linux Kernel Version3.12.12

Linux ≫ Linux Kernel Version3.12.13

Linux ≫ Linux Kernel Version3.12.14

Linux ≫ Linux Kernel Version3.12.15

Linux ≫ Linux Kernel Version3.12.16

Linux ≫ Linux Kernel Version3.12.17

Linux ≫ Linux Kernel Version3.13

Linux ≫ Linux Kernel Version3.13.1

Linux ≫ Linux Kernel Version3.13.2

Linux ≫ Linux Kernel Version3.13.3

Linux ≫ Linux Kernel Version3.13.4

Linux ≫ Linux Kernel Version3.13.5

Linux ≫ Linux Kernel Version3.13.6

Linux ≫ Linux Kernel Version3.13.7

Linux ≫ Linux Kernel Version3.13.8

Linux ≫ Linux Kernel Version3.13.9

Linux ≫ Linux Kernel Version3.13.10

Linux ≫ Linux Kernel Version3.13.11

Linux ≫ Linux Kernel Version3.14 Update-

Linux ≫ Linux Kernel Version3.14 Updaterc1

Linux ≫ Linux Kernel Version3.14 Updaterc2

Linux ≫ Linux Kernel Version3.14 Updaterc3

Linux ≫ Linux Kernel Version3.14 Updaterc4

Linux ≫ Linux Kernel Version3.14 Updaterc5

Linux ≫ Linux Kernel Version3.14 Updaterc6

Linux ≫ Linux Kernel Version3.14 Updaterc7

Linux ≫ Linux Kernel Version3.14 Updaterc8

Linux ≫ Linux Kernel Version3.14.1

Linux ≫ Linux Kernel Version3.14.2

Linux ≫ Linux Kernel Version3.14.3

Linux ≫ Linux Kernel Version3.14.4

Linux ≫ Linux Kernel Version3.14.5

Linux ≫ Linux Kernel Version3.15

Linux ≫ Linux Kernel Version3.15.1

Linux ≫ Linux Kernel Version3.15.2

Linux ≫ Linux Kernel Version3.15.3

Linux ≫ Linux Kernel Version3.15.4

Linux ≫ Linux Kernel Version3.15.5

Linux ≫ Linux Kernel Version3.15.6

Linux ≫ Linux Kernel Version3.15.7

Linux ≫ Linux Kernel Version3.15.8

Linux ≫ Linux Kernel Version3.16.0

Linux ≫ Linux Kernel Version3.16.1

Linux ≫ Linux Kernel Version3.17

Linux ≫ Linux Kernel Version3.17.1

Linux ≫ Linux Kernel Version3.17.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.043

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://www.mandriva.com/security/advisories?name=MDVSA-2015:058

http://www.ubuntu.com/usn/USN-2515-1

http://www.ubuntu.com/usn/USN-2516-1

http://www.ubuntu.com/usn/USN-2517-1

http://www.ubuntu.com/usn/USN-2518-1

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html

http://thread.gmane.org/gmane.linux.man/7385/

Exploit

http://www.openwall.com/lists/oss-security/2014/11/20/4

http://www.securityfocus.com/bid/71154

https://nvd.nist.gov/vuln/detail/CVE-2014-8989

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8989

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8989

EUVD