PT-2014-3521 · Linux+5 · Linux Kernel+5
CVE-2014-0181
·
Publicado
2014-04-26
·
Atualizado
2023-04-16
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.14.1
Description
The Netlink implementation in the Linux kernel does not provide a mechanism for authorizing socket operations based on the opener of a socket. This allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the stdout or stderr of a setuid program.
Recommendations
For Linux kernel versions through 3.14.1, update to a version later than 3.14.1 to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu