The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-sourceUpgrade kernel-umUpgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-sn2Upgrade kernel-s390Upgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-defaultUpgrade kernel-smpUpgrade kernel-s390xUpgrade kernel-bigsmpUpgrade kernel-pseries64 | Feb 17, 2015 | Jul 7, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.12-10-mckinleyUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-mckinley | Nov 8, 2024 | Jul 7, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub