Lucene search
HistoryApr 24, 2013 - 7:55 p.m.
CVE-2013-1956
cve-2013-1956
linux kernel
user_namespace.c
filesystem restrictions
clone system call
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call.
Affected configurations
Node
linuxlinux_kernelRange≤3.8.5
ORlinuxlinux_kernelMatch3.8.0
ORlinuxlinux_kernelMatch3.8.1
ORlinuxlinux_kernelMatch3.8.2
ORlinuxlinux_kernelMatch3.8.3
ORlinuxlinux_kernelMatch3.8.4
Related
debiancve
debiancve
CVE-2013-1956
2013-04-24 19:55:01
cvelist
cvelist
CVE-2013-1956
2013-04-24 19:00:00
redhatcve
redhatcve
CVE-2013-1956
2015-10-30 10:15:11
ubuntucve
ubuntucve
CVE-2013-1956
2013-04-24 00:00:00
prion
prion
Design/Logic Flaw
2013-04-24 19:55:00
nvd
nvd
CVE-2013-1956
2013-04-24 19:55:01
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-1956