Code injection

2014-11-3001:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a “negative groups” issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.

CPENameOperatorVersion
linux_kerneleq3.0.25
linux_kerneleq3.15.8
linux_kerneleq3.1.2
linux_kerneleq3.10.8
linux_kerneleq3.15.1
linux_kerneleq3.0 rc2
linux_kerneleq3.0.22
linux_kerneleq3.12
linux_kerneleq3.0.5
linux_kerneleq3.0 rc7

Name	Operator	Version
linux_kernel	eq	3.0.25
linux_kernel	eq	3.15.8
linux_kernel	eq	3.1.2
linux_kernel	eq	3.10.8
linux_kernel	eq	3.15.1
linux_kernel	eq	3.0 rc2
linux_kernel	eq	3.0.22
linux_kernel	eq	3.12
linux_kernel	eq	3.0.5
linux_kernel	eq	3.0 rc7