CVE-2011-4080 in Linux Kernel
Sumário (Inglês)
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
Reservar
18/10/2011
Divulgação
24/05/2012
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 60836 | Linux Kernel sysrq_sysctl_handler Elevação de Privilégios | 264 | Não definido | Correção oficial | CVE-2011-4080 |