ROSA LABROSA-SA-2021-1952Advisory ROSA-SA-2021-1952
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Software: policycoreutils 2.5
OS: Cobalt 7.9
CVE-ID: CVE-2014-3215
CVE-Crit: CRITICAL
CVE-DESC: seunshare in policycoreutils 2.2.5 belongs to the root user with permissions 4755 and executes programs in a way that changes the relationship between the setuid system call and the stored set-user-ID getresuid value, making it easier for local users to gain privileges using a program that mistakenly expected it could permanently lose privileges.
CVE-STATUS: default
CVE-REV: default
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Cobalt | any | noarch | policycoreutils | < 2.5 | UNKNOWN |
Related
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%