Permissions, Privileges, and Access Controls in Linux kernel - CVE-2014-4014

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU41535

Permissions, Privileges, and Access Controls in Linux kernel - CVE-2014-4014

Published: June 23, 2014 / Updated: August 10, 2020


Vulnerability identifier: #VU41535
CSH Severity: Medium
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-4014
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.


Affected software

Linux kernel
Ubuntu
linux-image-3.5.0-54-generic (Ubuntu package)
linux-lts-saucy (Ubuntu package)
linux (Ubuntu package)
linux-lts-trusty (Ubuntu package)

How to mitigate CVE-2014-4014

Install update from vendor's website.

Linux kernel - update to 3.14.8
linux-image-3.5.0-54-generic (Ubuntu package) - update to 3.5.0-54.81~precise1
linux-lts-saucy (Ubuntu package) - update to 3.11.0-26.45~precise1
linux (Ubuntu package) - update to 3.13.0-35.62
linux-lts-trusty (Ubuntu package) - update to 3.13.0-35.62~precise1

External References

Related Security Bulletins