The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-defaultUpgrade kernel-smpUpgrade kernel-bigsmpUpgrade kernel-64k-pagesizeUpgrade kernel-s390Upgrade um-host-kernelUpgrade um-host-install-initrdUpgrade kernel-sourceUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-sn2Upgrade kernel-debugUpgrade kernel-umUpgrade kernel-syms | Feb 17, 2015 | Jul 7, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-itanium | Nov 8, 2024 | Jul 7, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub