Published: 14/04/2017 Updated: 13/02/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The scm plug-in in mock might allow malicious users to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedoraproject fedora 25
fedoraproject fedora 24
fedoraproject fedora 23
mock project scm plugin -

Debian Bug report logs - #850320 mock: CVE-2016-6299: privilige escalation via mock-scm Package: src:mock; Maintainer for src:mock is Tzafrir Cohen <tzafrir@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 5 Jan 2017 21:00:12 UTC Severity: grave Tags: patch, security, upstream Found in ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=1375490 http://www.securityfocus.com/bid/92948 http://www.openwall.com/lists/oss-security/2016/09/13/2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYLMPA5VLLX67DUJ6XLJ2TIW6CX2CFL4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5PH2YGYWYUAYPHK32SGUZGZXQEBEYNK/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFC4LU6GYYEVUK6LQ2FKUGMZXRTLLL5A/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850320 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-6299

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect