Lucene search
Gentoo FoundationMGASA-2014-0251HistoryJun 06, 2014 - 9:49 a.m.
Updated libcap-ng packages fix CVE-2014-3215
2014-06-0609:49:51
Gentoo Foundation
advisories.mageia.org
18
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Updated libcap-ng packages fix security vulnerability: capng_lock() in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without capabilities, which is potentially dangerous (CVE-2014-3215).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | libcap-ng | < 0.7.3-2.1 | libcap-ng-0.7.3-2.1.mga3 |
| Mageia | 4 | noarch | libcap-ng | < 0.7.3-3.1 | libcap-ng-0.7.3-3.1.mga4 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0251)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-543)
2015-09-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-544)
2015-09-08 00:00:00
securityvulns
securityvulns
[oss-security] Re: local privilege escalation due to capng_lock as used in seunshare
2014-05-15 00:00:00
seunshare privileges escalation
2014-05-15 00:00:00
nvd
nvd
CVE-2014-3215
2014-05-08 10:55:05
nessus
nessus
Mandriva Linux Security Advisory : libcap-ng (MDVSA-2015:156)
2015-03-30 00:00:00
Mandriva Linux Security Advisory : libcap-ng (MDVSA-2014:117)
2014-06-11 00:00:00
RHEL 5 : libcap-ng (Unpatched Vulnerability)
2024-06-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1952
2021-07-02 17:58:55
ubuntucve
ubuntucve
CVE-2014-3215
2014-05-08 00:00:00
prion
prion
Code injection
2014-05-08 10:55:00
cvelist
cvelist
CVE-2014-3215
2014-05-08 10:00:00
f5
f5
K16596 : Privilege escalation vulnerability CVE-2014-3215
2015-05-11 00:00:00
SOL16596 - Privilege escalation vulnerability CVE-2014-3215
2015-05-11 00:00:00
amazon
amazon
Medium: libcap-ng
2015-06-16 10:27:00
Medium: kernel
2015-06-16 10:28:00
gentoo
gentoo
policycoreutils: Privilege escalation
2014-12-26 00:00:00
debiancve
debiancve
CVE-2014-3215
2014-05-08 10:55:05
cve
cve
CVE-2014-3215
2014-05-08 10:55:05
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-04-23 00:00:00
Unbreakable Enterprise kernel security update
2015-04-23 00:00:00
Unbreakable Enterprise kernel security update
2015-04-23 00:00:00
redhat
redhat
(RHSA-2015:0864) Important: kernel security and bug fix update
2015-04-21 00:00:00
centos
centos
kernel, perf, python security update
2015-04-22 09:51:52
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for MGASA-2014-0251