Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11942
HistoryJan 15, 2019 - 9:10 a.m.

Privilege Escalation

2019-01-1509:10:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

kernel-rt is vulnerable to privilege escalation attacks. The vulnerability exists as arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

References

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C