CVE-2016-6299 The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| mock project scm plugin | All versions | No fix listed |
References
- [oss-security] 20160913 CVE-2016-6299 mock: privilige escalation via mock-scm mailing-list patch third-party-advisory
- 92948 third-party-advisory vdb-entry
- bugzilla.redhat.com exploit issue-tracking third-party-advisory vdb-entry
- FEDORA-2016-34e61fa48d vendor-advisory
- FEDORA-2016-5a12527790 vendor-advisory
- FEDORA-2016-145afea99e vendor-advisory