CVE-2015-0278

Опубликовано: 18 мая 2015

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

Ссылки

http://advisories.mageia.org/MGASA-2015-0186.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:228
Third Party Advisory
https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c
Patch
Third Party Advisory
https://github.com/libuv/libuv/pull/215
Third Party Advisory
https://groups.google.com/forum/#%21msg/libuv/0JZxwLMtsMI/jraczskYWWQJ
https://lists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html
Third Party Advisory
https://security.gentoo.org/glsa/201611-10
Third Party Advisory
http://advisories.mageia.org/MGASA-2015-0186.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:228
Third Party Advisory
https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c
Patch
Third Party Advisory
https://github.com/libuv/libuv/pull/215
Third Party Advisory
https://groups.google.com/forum/#%21msg/libuv/0JZxwLMtsMI/jraczskYWWQJ
https://lists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html
Third Party Advisory
https://security.gentoo.org/glsa/201611-10
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:libuv_project:libuv:*:*:*:*:*:*:*:*

Версия до 0.10.33 (включая)

Конфигурация 3

cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*

Версия до 0.10.37 (исключая)

EPSS

Процентиль: 82%

0.01778

Низкий

10 Critical

CVSS2

Дефекты

CWE-273

Связанные уязвимости

CVE-2015-0278

ubuntu

около 10 лет назад

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

CVE-2015-0278

redhat

больше 11 лет назад

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

CVE-2015-0278

debian

около 10 лет назад

libuv before 0.10.34 does not properly drop group privileges, which al ...

GHSA-hmvq-6hjm-q8hj

github

около 3 лет назад

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

BDU:2016-00297

fstec

около 10 лет назад

Уязвимость операционной системы Fedora, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 82%

0.01778

Низкий

10 Critical

CVSS2

Дефекты

CWE-273