NVD

Id
28953  
Name
CVE-2015-8967  
Description
arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-08  
Modified Date
2016-12-09  
Seq
2015-8967  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152622 28953 CVE-2015-8967 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c623b33b4e9599c6ac5076f7db7369eb9869aa04  View
152623 28953 CVE-2015-8967 http://source.android.com/security/bulletin/2016-12-01.html  View
152624 28953 CVE-2015-8967 94680  View
152625 28953 CVE-2015-8967 https://github.com/torvalds/linux/commit/c623b33b4e9599c6ac5076f7db7369eb9869aa04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11982 JVNDB-2015-007303 Linux Kernel の arch/arm64/kernel/sys.c における "厳密なページ許可" による保護メカニズムを回避される脆弱性 Linux Kernel の arch/arm64/kernel/sys.c には、"厳密なページ許可" による保護メカニズムを回避され、システムコールのテーブルを変更され、その結果、権限を取得される脆弱性が存在します。 CVE-2015-8967 86192 CVE-2015-8967 28953 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007303.html 2015-01-08 2016-12-12 View