CVE-2015-5231

Опубликовано: 07 июн. 2016

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:criu:checkpoint\/restore_in_userspace:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.0006

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2015-5231

CVSS3: 5.5

ubuntu

больше 9 лет назад

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.

CVE-2015-5231

redhat

больше 10 лет назад

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.

CVE-2015-5231

CVSS3: 5.5

debian

больше 9 лет назад

The service daemon in CRIU does not properly restrict access to non-du ...

GHSA-7hr3-7mmr-77hp

CVSS3: 5.5

github

больше 3 лет назад

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.

EPSS

Процентиль: 19%

0.0006

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200