NVD

Id
32077  
Name
CVE-2014-4014  
Description
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-23  
Modified Date
2017-01-06  
Seq
2014-4014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168768 32077 CVE-2014-4014 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=23adbe12ef7d3d4195e80800ab36b37bee28cd03  View
168769 32077 CVE-2014-4014 59220  View
168770 32077 CVE-2014-4014 33824  View
168771 32077 CVE-2014-4014 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8  View
168772 32077 CVE-2014-4014 [oss-security] 20140610 CVE-2014-4014: Linux kernel user namespace bug  View
168773 32077 CVE-2014-4014 67988  View
168774 32077 CVE-2014-4014 1030394  View
168775 32077 CVE-2014-4014 https://bugzilla.redhat.com/show_bug.cgi?id=1107966  View
168776 32077 CVE-2014-4014 https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14141 JVNDB-2014-003016 Linux kernel のケーパビリティの実装における chmod 制限を回避される脆弱性 Linux kernel のケーパビリティの実装は、名前空間が inode を適用できないことを適切に考慮しないため、chmod 制限を回避される脆弱性が存在します。 CVE-2014-4014 71302 CVE-2014-4014 32077 6.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003016.html 2014-06-16 2014-07-16 View