7.8

CVE-2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Suse ≫ Linux Enterprise Real Time Extension Version 12 Update sp1
Linux ≫ Linux Kernel Version < 4.4
Linux ≫ Linux Kernel Version 4.4 Update rc1
Linux ≫ Linux Kernel Version 4.4 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.341
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/09/1
Patch
Third Party Advisory
Mailing List
Issue Tracking
https://access.redhat.com/errata/RHSA-2018:0151
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0152
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0181
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1284450
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd
Patch
Vendor Advisory
Issue Tracking
https://usn.ubuntu.com/3798-1/
Third Party Advisory
https://usn.ubuntu.com/3798-2/
Third Party Advisory