Published: 16/03/2015 Updated: 28/12/2016

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

VMScore: 170

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel up to and including 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leaks or privilege escalation CVE-2013-7421 / CVE-2014-9644 It was discovered that the Crypto API allowed unprivileged users to load arbitrary kernel modules A local user can use this flaw to exploit vulnerabilities ...

Several security issues were fixed in the kernel ...

The system could be made to expose sensitive information to local applications ...

Several security issues were fixed in the kernel ...

The system could be made to expose sensitive information over the local applications ...

Race condition in the handle_to_path function in fs/fhandlec in the Linux kernel through 3191 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function ...

CWE-362 http://marc.info/?l=linux-kernel&m=142247707318982&w=2 http://www.openwall.com/lists/oss-security/2015/01/29/12 https://bugzilla.redhat.com/show_bug.cgi?id=1187534 http://www.debian.org/security/2015/dsa-3170 http://www.securityfocus.com/bid/72357 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html http://www.ubuntu.com/usn/USN-2667-1 http://www.ubuntu.com/usn/USN-2665-1 http://www.ubuntu.com/usn/USN-2661-1 http://www.ubuntu.com/usn/USN-2660-1 https://nvd.nist.gov https://www.debian.org/security/./dsa-3170 https://usn.ubuntu.com/2667-1/https://access.redhat.com/security/cve/cve-2015-1420

CVE-2015-1420

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect