CVE-2014-4014 in Kernel
Summary
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
06/09/2014
Disclosure
06/23/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13585 | Linux Kernel capability.c inode_capable access control | 264 | Proof-of-Concept | Official fix | CVE-2014-4014 |