CVE-2015-1350 : The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirem

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.

Published 2016-05-02 10:59:08

Updated 2021-07-15 19:16:10

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2015-1350

Redhat » Enterprise Linux » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux » Version: 5.0
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Mrg » Version: 2.0
cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 3.0 and up to, including, (<=) 3.19.8
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2015-1350

Top countries where our scanners detected CVE-2015-1350

Top open port discovered on systems with this issue 80

IPs affected by CVE-2015-1350 160,362

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2015-1350!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2015-1350

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-1350

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2015-1350

CWE-552 Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-1350

http://marc.info/?l=linux-kernel&m=142153722930533&w=2

'[RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks' - MARC
Mailing List;Patch;Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185139

1185139 – (CVE-2015-1350) CVE-2015-1350 kernel: denial of service in notify_change for filesystem xattrs
Issue Tracking;Patch;Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/24/5

oss-security - Re: CVE Request: Linux kernel - Denial of service in notify_change for xattrs.
Mailing List;Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492

#770492 - linux-image-3.16.0-4-686-pae: chown removes security.capability xattr on other users' files (CVE-2015-1350) - Debian Bug report logs
Exploit;Mailing List;Third Party Advisory
http://www.securityfocus.com/bid/76075

Linux Kernel CVE-2015-1350 Local Denial of Service Vulnerability
Third Party Advisory;VDB Entry