UbuntuUSN-2852-1Linux kernel (Raspberry Pi 2) vulnerability
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%
Releases
- Ubuntu 15.10
Packages
- linux-raspi2 - Linux kernel for Raspberry Pi 2
Details
Jann Horn discovered a ptrace issue with user namespaces in the Linux
kernel. The namespace owner could potentially exploit this flaw by ptracing
a root owned process entering the user namespace to elevate its privileges
and potentially gain access outside of the namespace.
(<http://bugs.launchpad.net/bugs/1527374>, CVE-2015-8709)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.10 | noarch | linux-image-4.2.0-1017-raspi2 | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-headers-4.2.0-1017-raspi2 | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-image-4.2.0-1017-raspi2-dbgsym | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-raspi2-headers-4.2.0-1017 | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-raspi2-tools-4.2.0-1017 | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-raspi2-tools-4.2.0-1017-dbgsym | < 4.2.0-1017.24 | UNKNOWN |
| Ubuntu | 15.10 | noarch | linux-tools-4.2.0-1017-raspi2 | < 4.2.0-1017.24 | UNKNOWN |
References
Related
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%