Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2015-8709

Disclosure Date: February 08, 2016 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states “there is no kernel bug here.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

linux

Products

linux kernel

References

Canonical

CVE-2015-8709 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8709)

BID-79899 (http://www.securityfocus.com/bid/79899)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html

[linux-kernel] 20151226 [PATCH] ptrace: being capable wrt a process requires mapped uids/gids (https://lkml.org/lkml/2015/12/25/71)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html

[linux-kernel] 20160106 Re: [PATCH] ptrace: being capable wrt a process requires mapped uids/gids (http://marc.info?l=linux-kernel&m=145204641422813&w=2)

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html

[oss-security] 20151231 Re: CVE Request: Linux kernel: privilege escalation in user namespaces (http://www.openwall.com/lists/oss-security/2015/12/31/5)

[oss-security] 20151217 CVE Request: Linux kernel: privilege escalation in user namespaces (http://www.openwall.com/lists/oss-security/2015/12/17/12)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html

[linux-kernel] 20160106 Re: [PATCH] ptrace: being capable wrt a process requires mapped uids/gids (http://marc.info?l=linux-kernel&m=145204362722256&w=2)

FEDORA-2016-5d43766e33 (http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html

SECTRACK-1034899 (http://www.securitytracker.com/id/1034899)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html

https://bugzilla.redhat.com/show_bug.cgi?id=1295287

DSA-3434 (http://www.debian.org/security/2016/dsa-3434)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html

Rapid7

Technical Analysis