CVE-2012-2123

Linux Kernel < 3.3.3 - Local Privilege Escalation via File System Capabilities

Title source: llm
STIX 2.1

Description

The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0743.html
Third Party Advisory, VDB Entry vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0670.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/20/6
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2469
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53166
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=806722
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027072

Scores

EPSS 0.0042
EPSS Percentile 34.5%

Details

CWE
CWE-264
Status published
Products (1)
linux/linux_kernel < 3.0.29
Published May 17, 2012
Tracked Since Feb 18, 2026