policycoreutils seunshare CVE-2014-3215 Local Privilege Escalation Vulnerability

Bugtraq ID:	67341
Class:	Design Error
CVE:	CVE-2014-3215
Remote:	No
Local:	Yes
Published:	May 12 2014 12:00AM
Updated:	Aug 11 2015 08:23PM
Credit:	Andy Lutomirski
Vulnerable:	Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux CentOS CentOS 6
Not Vulnerable:

policycoreutils seunshare CVE-2014-3215 Local Privilege Escalation Vulnerability

The policycoreutils is prone to a local privilege-escalation vulnerability.

Local attackers may exploit this issue to gain elevated privileges, to cause a denial-of-service condition or to modify data.

policycoreutils 2.2.5 is vulnerable; other versions may also be affected.

policycoreutils seunshare CVE-2014-3215 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

policycoreutils seunshare CVE-2014-3215 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

policycoreutils seunshare CVE-2014-3215 Local Privilege Escalation Vulnerability

References:

• Vendor Homepage (SELinux)