CVE-2013-1858 in Linux Kernel

摘要 (英语)

The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which allows local users to gain privileges by calling chroot and leveraging the sharing of the / directory between a parent process and a child process.

预定

2013-02-19

披露

2013-04-05

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
7998	Linux Kernel chroot CLONE_NEWUSER 权限提升	264	概念验证	官方修复	CVE-2013-1858