Published: 18/08/2014 Updated: 07/11/2023

CVSS v2 Base Score: 6.2 | Impact Score: 10 | Exploitability Score: 1.9

VMScore: 625

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

fs/namespace.c in the Linux kernel up to and including 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04

Several security issues were fixed in the kernel ...

fs/namespacec in the Linux kernel through 3161 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesyst ...

/* FUSE-based exploit for CVE-2014-5207 Copyright (c) 2014 Andy Lutomirski Based on code that is: Copyright (C) 2001-2007 Miklos Szeredi <miklos@szeredihu> This program can be distributed under the terms of the GNU GPL See the file COPYING gcc -Wall fuse_suidc `pkg-config fuse --cflags --libs` -o fuse_suid mkdir test /fuse_s ...

FUSE-based exploit that leverages a flaw in fs/namespacec where it does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges Linux kernels through 3161 are affected ...

CWE-269 http://www.openwall.com/lists/oss-security/2014/08/13/4 https://bugzilla.redhat.com/show_bug.cgi?id=1129662 https://github.com/torvalds/linux/commit/9566d6742852c527bf5af38af5cbb878dad75705 http://packetstormsecurity.com/files/128595/Linux-Kernel-3.16.1-FUSE-Privilege-Escalation.html http://osvdb.org/show/osvdb/110055 http://www.exploit-db.com/exploits/34923 http://www.ubuntu.com/usn/USN-2317-1 http://www.ubuntu.com/usn/USN-2318-1 http://www.securityfocus.com/bid/69216 http://seclists.org/oss-sec/2014/q3/352 https://exchange.xforce.ibmcloud.com/vulnerabilities/95266 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9566d6742852c527bf5af38af5cbb878dad75705 https://nvd.nist.gov https://usn.ubuntu.com/2317-1/https://www.exploit-db.com/exploits/34923/

CVE-2014-5207

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect