CVE-2015-0267

Related Files

Red Hat Security Advisory 2015-0986-01

Posted May 13, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-0986-01 - The kexec-tools packages contain the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec feature. The /sbin/kexec binary facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. The kexec fastboot mechanism allows booting a Linux kernel from the context of an already running kernel. It was found that the module-setup.sh script provided by kexec-tools created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files.

tags | advisory, arbitrary, kernel, local

systems | linux, redhat

advisories | CVE-2015-0267

SHA-256 | 509cde29180517d190dbca29d66ed3a6e3893d90ebcb625a5243f2447030f6f5

Download | Favorite | View