NVD

Id
35231  
Name
CVE-2014-7975  
Description
The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-10-13  
Modified Date
2017-01-06  
Seq
2014-7975  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180454 35231 CVE-2014-7975 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ef3a56b1c466629cd0bf482b09c7b0e5a085bb5  View
180455 35231 CVE-2014-7975 [stable] 20141008 [PATCH] fs: Add a missing permission check to do_umount  View
180456 35231 CVE-2014-7975 [oss-security] 20141008 CVE-2014-7975: 0-day umount denial of service  View
180457 35231 CVE-2014-7975 70314  View
180458 35231 CVE-2014-7975 1031180  View
180459 35231 CVE-2014-7975 USN-2415-1  View
180460 35231 CVE-2014-7975 USN-2416-1  View
180461 35231 CVE-2014-7975 USN-2417-1  View
180462 35231 CVE-2014-7975 USN-2418-1  View
180463 35231 CVE-2014-7975 USN-2419-1  View
180464 35231 CVE-2014-7975 USN-2420-1  View
180465 35231 CVE-2014-7975 USN-2421-1  View
180466 35231 CVE-2014-7975 linux-kernel-cve20147975-dos(96994)  View
180467 35231 CVE-2014-7975 https://bugzilla.redhat.com/show_bug.cgi?id=1151108  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15964 JVNDB-2014-004839 Linux Kernel の fs/namespace.c 内の do_umount 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/namespace.c 内の do_umount 関数は、読み取り専用のルートファイルシステムを変更する do_remount_sb の呼び出しに対する CAP_SYS_ADMIN ケーパビリティを要求しないため、サービス運用妨害 (書き込み権限の損失) 状態にされる脆弱性が存在します。 CVE-2014-7975 75268 CVE-2014-7975 35231 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004839.html 2014-10-09 2014-11-12 View