7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.8%
The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not
properly handle failure of an AppArmor change_hat system call, which might
allow attackers to trigger the unconfining of an apparmored task.
Author | Note |
---|---|
jdstrand | apparmor in OpenSUSE kernels < 2.6.18.8-0.8. needed |