NVD

Id
26443  
Name
CVE-2015-5231  
Description
The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-07  
Modified Date
2016-06-30  
Seq
2015-5231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139812 26443 CVE-2015-5231 openSUSE-SU-2015:1593  View
139813 26443 CVE-2015-5231 [oss-security] 20150825 CVE-2015-5228 & CVE-2015-5231 in the criu service daemon  View
139814 26443 CVE-2015-5231 https://bugzilla.redhat.com/show_bug.cgi?id=1256728  View
139815 26443 CVE-2015-5231 [CRIU] 20150825 Hardening the criu service daemon  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11878 JVNDB-2015-007198 CRIU のサービスデーモンにおける重要な情報を取得される脆弱性 CRIU のサービスデーモンは、ダンプ不可 (non-dumpable) プロセスへのアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-5231 82456 CVE-2015-5231 26443 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007198.html 2015-08-25 2016-06-09 View