CVE-2014-3519 The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capa...
MediumCVSS 6.5
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the file_handle structure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openvz vzkernel | = 2.6.32 | No fix listed |
References
- [oss-security] 20140624 OpenVZ simfs container filesystem breakout mailing-list mitigation third-party-advisory
- 68171 third-party-advisory vdb-entry
- help.virtuozzo.com release-notes vendor-advisory
- help.virtuozzo.com release-notes vendor-advisory
- help.virtuozzo.com release-notes vendor-advisory
- openvz.org patch release-notes vendor-advisory
- Debian Security Tracker CVE-2014-3519 vendor-advisory