PT-2014-6346
CVE-2014-5207
·
Published
2014-08-13
·
Updated
2020-08-14
Description by
CVSS 2.0
6.2
MediumMetricsAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.16.1
Description
The issue allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service via a "mount -o remount" command within a user namespace. This is due to the improper restriction of clearing MNT NODEV, MNT NOSUID, and MNT NOEXEC and changing MNT ATIME MASK during a remount of a bind mount.
Recommendations
For Linux kernel versions through 3.16.1, update to a version that contains a fix for this issue to prevent local users from gaining privileges or causing a denial of service.
Found an issue in the description? Have something to add? Feel free to write us 👾