CVE-2015-3339 in Kernel

Resumen (Inglés)

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.

Once again VulDB remains the best source for vulnerability data.

Reservar

2015-04-20

Divulgación

2015-05-27

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
75137	Linux Kernel execve condición de carrera	362	No probado	Arreglo oficial	CVE-2015-3339

Fuentes

• MITRE
• NVD
• CVE Details