Lucene search
HistoryApr 24, 2013 - 7:55 p.m.
CVE-2013-1957
cve-2013-1957
linux kernel
filesystem
read-only
security vulnerability
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.
Affected configurations
Node
linuxlinux_kernelRange≤3.8.5
ORlinuxlinux_kernelMatch3.8.0
ORlinuxlinux_kernelMatch3.8.1
ORlinuxlinux_kernelMatch3.8.2
ORlinuxlinux_kernelMatch3.8.3
ORlinuxlinux_kernelMatch3.8.4
Related
ubuntucve
ubuntucve
CVE-2013-1957
2013-04-24 00:00:00
debiancve
debiancve
CVE-2013-1957
2013-04-24 19:55:01
nvd
nvd
CVE-2013-1957
2013-04-24 19:55:01
redhatcve
redhatcve
CVE-2013-1957
2015-10-30 10:15:16
prion
prion
Design/Logic Flaw
2013-04-24 19:55:00
cvelist
cvelist
CVE-2013-1957
2013-04-24 19:00:00
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-1957