NVD

Id
28771  
Name
CVE-2015-8709  
Description
** DISPUTED ** kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here."  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-07  
Modified Date
2016-12-05  
Seq
2015-8709  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151398 28771 CVE-2015-8709 FEDORA-2016-5d43766e33  View
151399 28771 CVE-2015-8709 openSUSE-SU-2016:1008  View
151400 28771 CVE-2015-8709 SUSE-SU-2016:1019  View
151401 28771 CVE-2015-8709 SUSE-SU-2016:1031  View
151402 28771 CVE-2015-8709 SUSE-SU-2016:1032  View
151403 28771 CVE-2015-8709 SUSE-SU-2016:1033  View
151404 28771 CVE-2015-8709 SUSE-SU-2016:1034  View
151405 28771 CVE-2015-8709 SUSE-SU-2016:1035  View
151406 28771 CVE-2015-8709 SUSE-SU-2016:1037  View
151407 28771 CVE-2015-8709 SUSE-SU-2016:1038  View
151408 28771 CVE-2015-8709 SUSE-SU-2016:1039  View
151409 28771 CVE-2015-8709 SUSE-SU-2016:1040  View
151410 28771 CVE-2015-8709 SUSE-SU-2016:1041  View
151411 28771 CVE-2015-8709 SUSE-SU-2016:1045  View
151412 28771 CVE-2015-8709 SUSE-SU-2016:1046  View
151413 28771 CVE-2015-8709 SUSE-SU-2016:1764  View
151414 28771 CVE-2015-8709 [linux-kernel] 20160106 Re: [PATCH] ptrace: being capable wrt a process requires mapped uids/gids  View
151415 28771 CVE-2015-8709 [linux-kernel] 20160106 Re: [PATCH] ptrace: being capable wrt a process requires mapped uids/gids  View
151416 28771 CVE-2015-8709 [oss-security] 20151217 CVE Request: Linux kernel: privilege escalation in user namespaces  View
151417 28771 CVE-2015-8709 [oss-security] 20151231 Re: CVE Request: Linux kernel: privilege escalation in user namespaces  View
151418 28771 CVE-2015-8709 1034899  View
151419 28771 CVE-2015-8709 https://bugzilla.redhat.com/show_bug.cgi?id=1295287  View
151420 28771 CVE-2015-8709 [linux-kernel] 20151226 [PATCH] ptrace: being capable wrt a process requires mapped uids/gids  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11579 JVNDB-2015-006899 Linux Kernel の kernel/ptrace.c における権限を取得される脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2015-8709 85934 CVE-2015-8709 28771 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006899.html 2015-12-26 2016-02-26 View