Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3339
HistoryMay 27, 2015 - 10:59 a.m.

CVE-2015-3339

2015-05-2710:59:11
CWE-362
[email protected]
web.nvd.nist.gov
9

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

High

EPSS

0

Percentile

10.1%

JSON

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤3.19.5
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

References

Related

openvas 36
ubuntu 9
nessus 39
fedora 8
f5 2
prion 1
cve 1
debiancve 1
ubuntucve 1
securityvulns 3
cvelist 1
oraclelinux 6
suse 10
redhat 3
veracode 5
centos 2
ibm 2
debian 4
osv 3
lenovo 1
openvas
openvas
Ubuntu: Security Advisory (USN-2598-1)
2015-05-06 00:00:00
Ubuntu: Security Advisory (USN-2600-1)
2015-05-06 00:00:00
Ubuntu: Security Advisory (USN-2599-1)
2015-05-06 00:00:00
ubuntu
ubuntu
Linux kernel (Trusty HWE) vulnerability
2015-05-05 00:00:00
Linux kernel vulnerability
2015-05-05 00:00:00
Linux kernel (EC2) vulnerability
2015-04-30 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerability (USN-2599-1)
2015-05-06 00:00:00
Fedora 22 : kernel-4.0.1-300.fc22 (2015-7371)
2015-05-04 00:00:00
Ubuntu 12.04 LTS : linux vulnerability (USN-2596-1)
2015-05-06 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: kernel-4.0.1-300.fc22
2015-05-03 17:22:47
[SECURITY] Fedora 21 Update: kernel-3.19.7-200.fc21
2015-05-12 20:41:10
[SECURITY] Fedora 21 Update: kernel-4.0.5-200.fc21
2015-06-20 23:59:29
f5
f5
SOL95345942 - Linux kernel vulnerability CVE-2015-3339
2016-01-29 00:00:00
K95345942 : Linux kernel vulnerability CVE-2015-3339
2016-01-29 00:00:00
prion
prion
Race condition
2015-05-27 10:59:00
cve
cve
CVE-2015-3339
2015-05-27 10:59:11
debiancve
debiancve
CVE-2015-3339
2015-05-27 10:59:11
ubuntucve
ubuntucve
CVE-2015-3339
2015-04-21 00:00:00
securityvulns
securityvulns
[USN-2583-1] Linux kernel vulnerability
2015-05-05 00:00:00
Linux kernel multiple security vulnerabilities
2015-05-10 00:00:00
[SECURITY] [DSA 3237-1] linux security update
2015-05-05 00:00:00
cvelist
cvelist
CVE-2015-3339
2015-05-27 10:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-07-29 00:00:00
Unbreakable Enterprise kernel security update
2015-07-31 00:00:00
Unbreakable Enterprise kernel security update
2015-07-31 00:00:00
suse
suse
Live patch for the Linux Kernel (important)
2015-09-04 12:16:25
Live patch for the Linux Kernel (important)
2015-09-04 12:09:23
Live patch for the Linux Kernel (important)
2015-09-04 12:11:01
redhat
redhat
(RHSA-2015:1272) Moderate: kernel security, bug fix, and enhancement update
2015-07-22 00:00:00
(RHSA-2015:2411) Important: kernel-rt security, bug fix, and enhancement update
2015-11-19 13:46:10
(RHSA-2015:2152) Important: kernel security, bug fix, and enhancement update
2015-11-19 19:35:51
veracode
veracode
Information Disclosure
2019-05-02 05:40:58
Privilege Escalation
2019-05-02 05:40:58
Privilege Escalation
2019-05-02 05:40:59
centos
centos
kernel, perf, python security update
2015-07-26 14:10:53
kernel, perf, python security update
2015-11-30 19:36:22
ibm
ibm
Security Bulletin: PowerKVM is affected by Linux Kernel vulnerabilities (multiple CVEs)
2018-06-18 01:28:49
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:33:24
debian
debian
[SECURITY] [DSA 3237-1] linux security update
2015-04-26 12:37:13
[SECURITY] [DSA 3237-1] linux security update
2015-04-26 12:37:13
[SECURITY] [DLA 246-1] linux-2.6 security update
2015-06-17 11:25:00
osv
osv
linux - security update
2015-04-26 00:00:00
linux-2.6 - security update
2015-06-17 00:00:00
linux-2.6 - security update
2015-06-17 00:00:00
lenovo
lenovo
AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US
2020-04-13 19:22:04

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

High

EPSS

0

Percentile

10.1%

JSON
Related for NVD:CVE-2015-3339
openvas36ubuntu9nessus39fedora8f52prion1cve1debiancve1ubuntucve1securityvulns3cvelist1oraclelinux6suse10redhat3veracode5centos2ibm2debian4osv3lenovo1