PT-2014-6346

CVE-2014-5207

·

تاريخ النشر

2014-08-13

·

تاريخ التحديث

2020-08-14

الوصف من

CVSS 2.0
6.2
متوسطة
المقاييسAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.16.1
Description The issue allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service via a "mount -o remount" command within a user namespace. This is due to the improper restriction of clearing MNT NODEV, MNT NOSUID, and MNT NOEXEC and changing MNT ATIME MASK during a remount of a bind mount.
Recommendations For Linux kernel versions through 3.16.1, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2014-2023
ALT-PU-2014-2024
ALT-PU-2014-2025
ALT-PU-2014-2106
ALT-PU-2015-1794
OPENSUSE-SU-2014_1677-1
USN-2317-1
USN-2318-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾