PT-2014-6346
CVE-2014-5207
·
تاريخ النشر
2014-08-13
·
تاريخ التحديث
2020-08-14
الوصف من
CVSS 2.0
6.2
متوسطةالمقاييسAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.16.1
Description
The issue allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service via a "mount -o remount" command within a user namespace. This is due to the improper restriction of clearing MNT NODEV, MNT NOSUID, and MNT NOEXEC and changing MNT ATIME MASK during a remount of a bind mount.
Recommendations
For Linux kernel versions through 3.16.1, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾