CVE-2014-8989
30.11.2014, 01:59
The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 𝑥 ≤ 3.17.3 |
| linux | linux_kernel | 3.0:rc1 |
| linux | linux_kernel | 3.0:rc2 |
| linux | linux_kernel | 3.0:rc3 |
| linux | linux_kernel | 3.0:rc4 |
| linux | linux_kernel | 3.0:rc5 |
| linux | linux_kernel | 3.0:rc6 |
| linux | linux_kernel | 3.0:rc7 |
| linux | linux_kernel | 3.0.1 |
| linux | linux_kernel | 3.0.2 |
| linux | linux_kernel | 3.0.3 |
| linux | linux_kernel | 3.0.4 |
| linux | linux_kernel | 3.0.5 |
| linux | linux_kernel | 3.0.6 |
| linux | linux_kernel | 3.0.7 |
| linux | linux_kernel | 3.0.8 |
| linux | linux_kernel | 3.0.9 |
| linux | linux_kernel | 3.0.10 |
| linux | linux_kernel | 3.0.11 |
| linux | linux_kernel | 3.0.12 |
| linux | linux_kernel | 3.0.13 |
| linux | linux_kernel | 3.0.14 |
| linux | linux_kernel | 3.0.15 |
| linux | linux_kernel | 3.0.16 |
| linux | linux_kernel | 3.0.17 |
| linux | linux_kernel | 3.0.18 |
| linux | linux_kernel | 3.0.19 |
| linux | linux_kernel | 3.0.20 |
| linux | linux_kernel | 3.0.21 |
| linux | linux_kernel | 3.0.22 |
| linux | linux_kernel | 3.0.23 |
| linux | linux_kernel | 3.0.24 |
| linux | linux_kernel | 3.0.25 |
| linux | linux_kernel | 3.0.26 |
| linux | linux_kernel | 3.0.27 |
| linux | linux_kernel | 3.0.28 |
| linux | linux_kernel | 3.0.29 |
| linux | linux_kernel | 3.0.30 |
| linux | linux_kernel | 3.0.31 |
| linux | linux_kernel | 3.0.32 |
| linux | linux_kernel | 3.0.33 |
| linux | linux_kernel | 3.0.34 |
| linux | linux_kernel | 3.0.35 |
| linux | linux_kernel | 3.0.36 |
| linux | linux_kernel | 3.0.37 |
| linux | linux_kernel | 3.0.38 |
| linux | linux_kernel | 3.0.39 |
| linux | linux_kernel | 3.0.40 |
| linux | linux_kernel | 3.0.41 |
| linux | linux_kernel | 3.0.42 |
| linux | linux_kernel | 3.0.43 |
| linux | linux_kernel | 3.0.44 |
| linux | linux_kernel | 3.0.45 |
| linux | linux_kernel | 3.0.46 |
| linux | linux_kernel | 3.0.47 |
| linux | linux_kernel | 3.0.48 |
| linux | linux_kernel | 3.0.49 |
| linux | linux_kernel | 3.0.50 |
| linux | linux_kernel | 3.0.51 |
| linux | linux_kernel | 3.0.52 |
| linux | linux_kernel | 3.0.53 |
| linux | linux_kernel | 3.0.54 |
| linux | linux_kernel | 3.0.55 |
| linux | linux_kernel | 3.0.56 |
| linux | linux_kernel | 3.0.57 |
| linux | linux_kernel | 3.0.58 |
| linux | linux_kernel | 3.0.59 |
| linux | linux_kernel | 3.0.60 |
| linux | linux_kernel | 3.0.61 |
| linux | linux_kernel | 3.0.62 |
| linux | linux_kernel | 3.0.63 |
| linux | linux_kernel | 3.0.64 |
| linux | linux_kernel | 3.0.65 |
| linux | linux_kernel | 3.0.66 |
| linux | linux_kernel | 3.0.67 |
| linux | linux_kernel | 3.0.68 |
| linux | linux_kernel | 3.1 |
| linux | linux_kernel | 3.1:rc1 |
| linux | linux_kernel | 3.1:rc2 |
| linux | linux_kernel | 3.1:rc3 |
| linux | linux_kernel | 3.1:rc4 |
| linux | linux_kernel | 3.1.1 |
| linux | linux_kernel | 3.1.2 |
| linux | linux_kernel | 3.1.3 |
| linux | linux_kernel | 3.1.4 |
| linux | linux_kernel | 3.1.5 |
| linux | linux_kernel | 3.1.6 |
| linux | linux_kernel | 3.1.7 |
| linux | linux_kernel | 3.1.8 |
| linux | linux_kernel | 3.1.9 |
| linux | linux_kernel | 3.1.10 |
| linux | linux_kernel | 3.2 |
| linux | linux_kernel | 3.2 |
| linux | linux_kernel | 3.2:rc2 |
| linux | linux_kernel | 3.2:rc3 |
| linux | linux_kernel | 3.10 |
| linux | linux_kernel | 3.10.0 |
| linux | linux_kernel | 3.10.1 |
| linux | linux_kernel | 3.10.1 |
| linux | linux_kernel | 3.10.2 |
| linux | linux_kernel | 3.10.2 |
| linux | linux_kernel | 3.10.3 |
| linux | linux_kernel | 3.10.3 |
| linux | linux_kernel | 3.10.4 |
| linux | linux_kernel | 3.10.4 |
| linux | linux_kernel | 3.10.5 |
| linux | linux_kernel | 3.10.5 |
| linux | linux_kernel | 3.10.6 |
| linux | linux_kernel | 3.10.6 |
| linux | linux_kernel | 3.10.7 |
| linux | linux_kernel | 3.10.7 |
| linux | linux_kernel | 3.10.8 |
| linux | linux_kernel | 3.10.8 |
| linux | linux_kernel | 3.10.9 |
| linux | linux_kernel | 3.10.9 |
| linux | linux_kernel | 3.10.10 |
| linux | linux_kernel | 3.10.11 |
| linux | linux_kernel | 3.10.12 |
| linux | linux_kernel | 3.10.13 |
| linux | linux_kernel | 3.10.14 |
| linux | linux_kernel | 3.10.15 |
| linux | linux_kernel | 3.10.16 |
| linux | linux_kernel | 3.10.17 |
| linux | linux_kernel | 3.10.18 |
| linux | linux_kernel | 3.10.19 |
| linux | linux_kernel | 3.10.20 |
| linux | linux_kernel | 3.10.21 |
| linux | linux_kernel | 3.10.22 |
| linux | linux_kernel | 3.10.23 |
| linux | linux_kernel | 3.10.24 |
| linux | linux_kernel | 3.10.25 |
| linux | linux_kernel | 3.10.26 |
| linux | linux_kernel | 3.10.27 |
| linux | linux_kernel | 3.10.28 |
| linux | linux_kernel | 3.10.29 |
| linux | linux_kernel | 3.11 |
| linux | linux_kernel | 3.11.1 |
| linux | linux_kernel | 3.11.2 |
| linux | linux_kernel | 3.11.3 |
| linux | linux_kernel | 3.11.4 |
| linux | linux_kernel | 3.11.5 |
| linux | linux_kernel | 3.11.6 |
| linux | linux_kernel | 3.11.7 |
| linux | linux_kernel | 3.11.8 |
| linux | linux_kernel | 3.11.9 |
| linux | linux_kernel | 3.11.10 |
| linux | linux_kernel | 3.12 |
| linux | linux_kernel | 3.12.1 |
| linux | linux_kernel | 3.12.2 |
| linux | linux_kernel | 3.12.3 |
| linux | linux_kernel | 3.12.4 |
| linux | linux_kernel | 3.12.5 |
| linux | linux_kernel | 3.12.6 |
| linux | linux_kernel | 3.12.7 |
| linux | linux_kernel | 3.12.8 |
| linux | linux_kernel | 3.12.9 |
| linux | linux_kernel | 3.12.10 |
| linux | linux_kernel | 3.12.11 |
| linux | linux_kernel | 3.12.12 |
| linux | linux_kernel | 3.12.13 |
| linux | linux_kernel | 3.12.14 |
| linux | linux_kernel | 3.12.15 |
| linux | linux_kernel | 3.12.16 |
| linux | linux_kernel | 3.12.17 |
| linux | linux_kernel | 3.13 |
| linux | linux_kernel | 3.13.1 |
| linux | linux_kernel | 3.13.2 |
| linux | linux_kernel | 3.13.3 |
| linux | linux_kernel | 3.13.4 |
| linux | linux_kernel | 3.13.5 |
| linux | linux_kernel | 3.13.6 |
| linux | linux_kernel | 3.13.7 |
| linux | linux_kernel | 3.13.8 |
| linux | linux_kernel | 3.13.9 |
| linux | linux_kernel | 3.13.10 |
| linux | linux_kernel | 3.13.11 |
| linux | linux_kernel | 3.14 |
| linux | linux_kernel | 3.14:rc1 |
| linux | linux_kernel | 3.14:rc2 |
| linux | linux_kernel | 3.14:rc3 |
| linux | linux_kernel | 3.14:rc4 |
| linux | linux_kernel | 3.14:rc5 |
| linux | linux_kernel | 3.14:rc6 |
| linux | linux_kernel | 3.14:rc7 |
| linux | linux_kernel | 3.14:rc8 |
| linux | linux_kernel | 3.14.1 |
| linux | linux_kernel | 3.14.2 |
| linux | linux_kernel | 3.14.3 |
| linux | linux_kernel | 3.14.4 |
| linux | linux_kernel | 3.14.5 |
| linux | linux_kernel | 3.15 |
| linux | linux_kernel | 3.15.1 |
| linux | linux_kernel | 3.15.2 |
| linux | linux_kernel | 3.15.3 |
| linux | linux_kernel | 3.15.4 |
| linux | linux_kernel | 3.15.5 |
| linux | linux_kernel | 3.15.6 |
| linux | linux_kernel | 3.15.7 |
| linux | linux_kernel | 3.15.8 |
| linux | linux_kernel | 3.16.0 |
| linux | linux_kernel | 3.16.1 |
| linux | linux_kernel | 3.17 |
| linux | linux_kernel | 3.17.1 |
| linux | linux_kernel | 3.17.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||||||||||
| linux-armadaxp |
| ||||||||||||||||||
| linux-aws |
| ||||||||||||||||||
| linux-ec2 |
| ||||||||||||||||||
| linux-flo |
| ||||||||||||||||||
| linux-fsl-imx51 |
| ||||||||||||||||||
| linux-gke |
| ||||||||||||||||||
| linux-goldfish |
| ||||||||||||||||||
| linux-grouper |
| ||||||||||||||||||
| linux-hwe |
| ||||||||||||||||||
| linux-hwe-edge |
| ||||||||||||||||||
| linux-linaro-omap |
| ||||||||||||||||||
| linux-linaro-shared |
| ||||||||||||||||||
| linux-linaro-vexpress |
| ||||||||||||||||||
| linux-lts-quantal |
| ||||||||||||||||||
| linux-lts-raring |
| ||||||||||||||||||
| linux-lts-saucy |
| ||||||||||||||||||
| linux-lts-trusty |
| ||||||||||||||||||
| linux-lts-utopic |
| ||||||||||||||||||
| linux-lts-vivid |
| ||||||||||||||||||
| linux-lts-wily |
| ||||||||||||||||||
| linux-lts-xenial |
| ||||||||||||||||||
| linux-maguro |
| ||||||||||||||||||
| linux-mako |
| ||||||||||||||||||
| linux-manta |
| ||||||||||||||||||
| linux-mvl-dove |
| ||||||||||||||||||
| linux-qcm-msm |
| ||||||||||||||||||
| linux-raspi2 |
| ||||||||||||||||||
| linux-snapdragon |
| ||||||||||||||||||
| linux-ti-omap4 |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| kernel |
| ||
| kernel-debuginfo |
| ||
| kernel-debuginfo-common-i686 |
| ||
| kernel-debuginfo-common-x86_64 |
| ||
| kernel-devel |
| ||
| kernel-doc |
| ||
| kernel-headers |
| ||
| kernel-tools |
| ||
| kernel-tools-debuginfo |
| ||
| kernel-tools-devel |
| ||
| perf |
| ||
| perf-debuginfo |
|
Common Weakness Enumeration
References