CVE-2014-1425

2015-01-0719:59:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

High

EPSS

Percentile

5.1%

JSON

cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgroups via unspecified vectors.

Affected configurations

Nvd

Node

linuxcontainerscgmanagerMatch0.32

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch14.10

VendorProductVersionCPE
linuxcontainerscgmanager0.32cpe:2.3:a:linuxcontainers:cgmanager:0.32:*:*:*:*:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
canonicalubuntu_linux14.10cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linuxcontainers	cgmanager	0.32	cpe:2.3:a:linuxcontainers:cgmanager:0.32:::::::*
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
canonical	ubuntu_linux	14.10	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*