7.8

CVE-2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Suse ≫ Linux Enterprise Real Time Extension Version12 Updatesp1
Linux ≫ Linux Kernel Version < 4.4
Linux ≫ Linux Kernel Version4.4 Updaterc1
Linux ≫ Linux Kernel Version4.4 Updaterc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.341
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/09/1
Patch
Third Party Advisory
Mailing List
Issue Tracking
https://access.redhat.com/errata/RHSA-2018:0151
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0152
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0181
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1284450
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd
Patch
Vendor Advisory
Issue Tracking
https://usn.ubuntu.com/3798-1/
Third Party Advisory
https://usn.ubuntu.com/3798-2/
Third Party Advisory