Selinuxproject Policycoreutils vulnerabilities

1 known vulnerability affecting selinuxproject/policycoreutils.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2014-3215MEDIUMCVSS 6.9v2.2.52014-05-08

CVE-2014-3215 [MEDIUM] CWE-264 CVE-2014-3215: seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privile