Privilege Escalation

2020-04-1000:50:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

kernel is vulnerable to privilege escalation. The vulnerability exists through a NULL pointer dereference in nfs_wb_page_cancel(), allowing a local user on a system that has an NFS-mounted file system to cause a denial of service or escalate their privileges on that system.

CPENameOperatorVersion
kernel-rteq2.6.24.7__111.el5rt
kernel-rteq2.6.24.7__139.el5rt
kernel-rteq2.6.24.7__81.el5rt
kernel-rteq2.6.24.7__146.el5rt
kernel-rteq2.6.24.7__117.el5rt
kernel-rteq2.6.24.7__137.el5rt
kernel-rteq2.6.24.7__149.el5rt
kernel-rteq2.6.24.7__132.el5rt
kernel-rteq2.6.24.7__101.el5rt
kernel-rteq2.6.24.7__108.el5rt

Name	Operator	Version
kernel-rt	eq	2.6.24.7__111.el5rt
kernel-rt	eq	2.6.24.7__139.el5rt
kernel-rt	eq	2.6.24.7__81.el5rt
kernel-rt	eq	2.6.24.7__146.el5rt
kernel-rt	eq	2.6.24.7__117.el5rt
kernel-rt	eq	2.6.24.7__137.el5rt
kernel-rt	eq	2.6.24.7__149.el5rt
kernel-rt	eq	2.6.24.7__132.el5rt
kernel-rt	eq	2.6.24.7__101.el5rt
kernel-rt	eq	2.6.24.7__108.el5rt