CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

Use after free

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

UBUNTU-CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

Path traversal

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

CVE-2015-5228

Summary (CVE-2015-5228) : The vulnerability affects the CRIU service daemon, which creates log and dump files insecurely. This insecure file creation allows a local attacker to create arbitrary files and potentially take ownership of existing files due to directory-path related vectors. The conne...

CVE-2015-5231

CVE-2015-5231 affects the CRIU service daemon, where it does not properly restrict access to non-dumpable processes. This allows local attackers to obtain sensitive information through (1) process dumps or (2) ptrace access. The vulnerability is consistently described across multiple sources (NVD...

CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

Fedora 24 : criu-2.0-1.fc24 (2016-e722fe8b4d)

Update to 2.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] Fedora 24 Update: criu-2.0-1.fc24

criu is the user-space part of Checkpoint/Restore in User-space CRIU, a project to implement checkpoint/restore functionality for Linux in user-space...

openSUSE Security Update : criu (openSUSE-2015-599)

The systemd service in criu was disabled as a temporary workaround for possibile security issues CVE-2015-5228, CVE-2015-5231, bsc943105 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...