Privilege Escalation

2020-04-1001:01:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

kernel is vulnerable to privilege escalation. The vulnerability exists through buffer overflow flaws in the Linux kernel’s netlink-based wireless configuration interface implementation could allow a local user, who has the CAP_NET_ADMIN capability, to cause a denial of service or escalate their privileges on systems that have an active wireless interface.

CPENameOperatorVersion
kerneleq2.6.18__164.9.1.el5
kerneleq2.6.18__8.1.15.el5
kerneleq2.6.18__164.10.1.el5
kerneleq2.6.18__128.4.1.el5
kerneleq2.6.18__53.1.21.el5
kerneleq2.6.18__238.12.1.el5
kerneleq2.6.18__92.1.18.el5
kerneleq2.6.32__71.29.1.el6
kerneleq2.6.18__128.7.1.el5
kerneleq2.6.18__8.1.8.el5

Name	Operator	Version
kernel	eq	2.6.18__164.9.1.el5
kernel	eq	2.6.18__8.1.15.el5
kernel	eq	2.6.18__164.10.1.el5
kernel	eq	2.6.18__128.4.1.el5
kernel	eq	2.6.18__53.1.21.el5
kernel	eq	2.6.18__238.12.1.el5
kernel	eq	2.6.18__92.1.18.el5
kernel	eq	2.6.32__71.29.1.el6
kernel	eq	2.6.18__128.7.1.el5
kernel	eq	2.6.18__8.1.8.el5