CVE

Id
80616  
CVE No.
CVE-2015-3339  
Status
Candidate  
Description
Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.  
Phase
Assigned (20150420)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729042 80616 CVE-2015-3339 MLIST:[oss-security] 20150420 Re: Linux: chown() was racy relative to execve() - Linux kernel  View
729043 80616 CVE-2015-3339 URL:http://www.openwall.com/lists/oss-security/2015/04/20/5  View
729044 80616 CVE-2015-3339 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543  View
729045 80616 CVE-2015-3339 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6  View
729046 80616 CVE-2015-3339 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1214030  View
729047 80616 CVE-2015-3339 CONFIRM:https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543  View
729048 80616 CVE-2015-3339 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
729049 80616 CVE-2015-3339 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
729050 80616 CVE-2015-3339 DEBIAN:DSA-3237  View
729051 80616 CVE-2015-3339 URL:http://www.debian.org/security/2015/dsa-3237  View
729052 80616 CVE-2015-3339 FEDORA:FEDORA-2015-7736  View
729053 80616 CVE-2015-3339 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html  View
729054 80616 CVE-2015-3339 FEDORA:FEDORA-2015-8518  View
729055 80616 CVE-2015-3339 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html  View
729056 80616 CVE-2015-3339 REDHAT:RHSA-2015:1272  View
729057 80616 CVE-2015-3339 URL:http://rhn.redhat.com/errata/RHSA-2015-1272.html  View
729058 80616 CVE-2015-3339 SUSE:SUSE-SU-2016:2074  View
729059 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html  View
729060 80616 CVE-2015-3339 SUSE:openSUSE-SU-2015:1382  View
729061 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html  View
729062 80616 CVE-2015-3339 SUSE:SUSE-SU-2015:1487  View
729063 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html  View
729064 80616 CVE-2015-3339 SUSE:SUSE-SU-2015:1488  View
729065 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html  View
729066 80616 CVE-2015-3339 SUSE:SUSE-SU-2015:1489  View
729067 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html  View
729068 80616 CVE-2015-3339 SUSE:SUSE-SU-2015:1491  View
729069 80616 CVE-2015-3339 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html  View
729070 80616 CVE-2015-3339 SECTRACK:1032412  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7139 JVNDB-2015-002459 Drupal 用 Path Breadcrumbs モジュールにおけるアクセス制限を回避される脆弱性 Drupal 用 Path Breadcrumbs モジュールには、アクセス制限を回避され、重要なノードタイトルを取得される脆弱性が存在します。 CVE-2015-3391 80616 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002459.html  View