Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-4177

Опубликовано: 02 мая 2016
Источник: nvd
CVSS3: 5.5
CVSS2: 4.9
EPSS Низкий

Описание

The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.

Комментарий

CWE-476: NULL Pointer Dereference

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 4.0.4 (включая)

EPSS

Процентиль: 13%
0.00042
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 10 лет назад

The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.

redhat
больше 10 лет назад

The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.

CVSS3: 5.5
debian
почти 10 лет назад

The collect_mounts function in fs/namespace.c in the Linux kernel befo ...

CVSS3: 5.5
github
больше 3 лет назад

The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.

EPSS

Процентиль: 13%
0.00042
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-Other