Lucene search

K
vmwareVMwareVMSA-2016-0018
HistoryNov 09, 2016 - 12:00 a.m.

VMware product updates address local privilege escalation vulnerability in Linux kernel

2016-11-0900:00:00
www.vmware.com
61

0.879 High

EPSS

Percentile

98.4%

**a. Local privilege escalation vulnerability in Linux kernel **

The Linux kernel which ships with the base operating system of VMware Appliances contains a race condition in the way its memory subsystem handles copy-on-write (aka “Dirty COW”). Successful exploitation of the vulnerability may allow for local privilege escalation. The product lines listed in this advisory have been confirmed to be affected. VMware product lines that are not affected are documented in VMware Knowledge Base article 2147515.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-5195 to this issue.

Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.