Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14681
HistorySep 21, 2017 - 12:00 a.m.

CVE-2017-14681

2017-09-2100:00:00
ubuntu.com
ubuntu.com
11

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after
dropping privileges to a non-root account, which might allow local users to
kill arbitrary processes by leveraging access to this non-root account for
p3scan.pid modification before a root script executes a “kill cat /pathname/p3scan.pid” command, as demonstrated by etc/init.d/p3scan.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchp3scan< anyUNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2017-14681