CVE-2015-3339 - CERT CVE
ID CVE-2015-3339
Sažetak Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.
Reference
CVSS
Base: 6.2
Impact: 10.0
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:L/AC:H/Au:N/C:C/I:C/A:C
Zadnje važnije ažuriranje 07-11-2023 - 02:25
Objavljeno 27-05-2015 - 10:59