PT-2017-6639
CVE-2015-3170
·
Publicado
2017-07-21
·
Atualizado
2017-07-26
Descrição por
CVSS 2.0
2.1
BaixaMétricasAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
selinux-policy (affected versions not specified)
Description
The issue allows local users to cause a denial of service, specifically preventing SSH login, by creating a hardlink to /etc/passwd from a directory named .config and updating selinux-policy, when sysctl fs.protected hardlinks are set to 0.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾