NVD

Id
23744  
Name
CVE-2015-1420  
Description
Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-03-16  
Modified Date
2016-12-27  
Seq
2015-1420  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126226 23744 CVE-2015-1420 SUSE-SU-2015:1224  View
126227 23744 CVE-2015-1420 openSUSE-SU-2015:1382  View
126228 23744 CVE-2015-1420 SUSE-SU-2015:1478  View
126229 23744 CVE-2015-1420 SUSE-SU-2015:1592  View
126230 23744 CVE-2015-1420 SUSE-SU-2015:1611  View
126231 23744 CVE-2015-1420 [linux-kernel] 20150128 [PATCH v2] vfs: read file_handle only once in handle_to_path  View
126232 23744 CVE-2015-1420 DSA-3170  View
126233 23744 CVE-2015-1420 [oss-security] 20150129 CVE-2015-1420 - Linux kernel fs/fhandle.c race condition  View
126234 23744 CVE-2015-1420 72357  View
126235 23744 CVE-2015-1420 USN-2660-1  View
126236 23744 CVE-2015-1420 USN-2661-1  View
126237 23744 CVE-2015-1420 USN-2665-1  View
126238 23744 CVE-2015-1420 USN-2667-1  View
126239 23744 CVE-2015-1420 https://bugzilla.redhat.com/show_bug.cgi?id=1187534  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6516 JVNDB-2015-001836 Linux Kernel の fs/fhandle.c の handle_to_path 関数におけるサイズ制限を回避される脆弱性 Linux Kernel の fs/fhandle.c の handle_to_path 関数には、競合状態により、サイズ制限を回避される、および追加のメモリ領域での読み込み操作を誘発される脆弱性が存在します。 CVE-2015-1420 78645 CVE-2015-1420 23744 1.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001836.html 2015-01-30 2015-11-27 View