CVE-2014-5206

2014-08-1811:15:00

CWE-269

[email protected]

web.nvd.nist.gov

cve-2014-5206

do_remount function

linux kernel

local users

read-only restriction

sandbox protection

user namespace

7 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a “mount -o remount” command within a user namespace.

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt3.14.19
linux:linux_kernellinux linux kernellt3.16.3
linux:linux_kernellinux linux kernellt3.12.27
linux:linux_kernellinux linux kernellt3.10.55
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	3.14.19
linux:linux_kernel	linux linux kernel	lt	3.16.3
linux:linux_kernel	linux linux kernel	lt	3.12.27
linux:linux_kernel	linux linux kernel	lt	3.10.55
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04