CVE-2017-17807 in Kernel
요약 (영어)
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2017. 12. 20.
공개
2017. 12. 20.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 110933 | Linux Kernel KEYS request_key.c request_key 권한 상승 | 284 | 정의되지 않음 | 공식 수정 | CVE-2017-17807 |