CVE-2014-3215 seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-...
MediumCVSS 6.9
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selinuxproject policycoreutils | = 2.2.5 | No fix listed |
References
- advisories.mageia.org
- openSUSE-SU-2014:0749 vendor-advisory
- [oss-security] 20140429 local privilege escalation due to capng_lock as used in seunshare mailing-list
- [oss-security] 20140430 Re: local privilege escalation due to capng_lock as used in seunshare mailing-list
- [oss-security] 20140507 Re: local privilege escalation due to capng_lock as used in seunshare mailing-list
- RHSA-2015:0864 vendor-advisory
- 59007 third-party-advisory
- MDVSA-2015:156 vendor-advisory
- www.oracle.com
- 67341 vdb-entry
- Debian Security Tracker CVE-2014-3215 vendor-advisory