CVE-2014-4014 Privilege escalation in n/a
Local attackers can bypass chmod restrictions and escalate privileges by exploiting a flaw in Linux kernel capabilities and namespace handling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-4014?
CVE-2014-4014 is a medium-severity vulnerability in Linux kernel, published on 23 Jun 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.
Weakness: CWE-264
Which versions are affected by CVE-2014-4014?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2014-4014?
Upgrade to a fixed version.
Is CVE-2014-4014 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2014-4014 exists.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2014-4014, GHSA-73cf-9h72-w34c, UBUNTU-CVE-2014-4014.