CVE-2015-3170 in selinux-policyinfo

Summary

selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

04/10/2015

Disclosure

07/21/2017

CPE

ready

CVSS

4.4

EPSS

0.00040

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!