CVE-2016-2856

Related Files

Ubuntu PT Chown Privilege Escalation

Posted Apr 1, 2017

Authored by halfdog

Ubuntu versions prior to 15.10 suffer from a PT chown arbitrary PTs access via user namespace privilege escalation vulnerability.

tags | exploit, arbitrary

systems | linux, ubuntu

advisories | CVE-2016-2856

SHA-256 | ebfda6a018f1d7bdcee1fac1fe9bffc5393c7667fb1b61ffa9a97d92473d2f4f

Download | Favorite | View

Ubuntu Security Notice USN-2985-1

Posted May 26, 2015

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2985-1 - Martin Carpenter discovered that pt_chown in the GNU C Library did not properly check permissions for tty files. A local attacker could use this to gain administrative privileges or expose sensitive information. Robin Hack discovered that the Name Service Switch (NSS) implementation in the GNU C Library did not properly manage its file descriptors. An attacker could use this to cause a denial of service (infinite loop). Various other issues were also addressed.

tags | advisory, denial of service, local

systems | linux, ubuntu

advisories | CVE-2013-2207, CVE-2014-8121, CVE-2014-9761, CVE-2015-1781, CVE-2015-5277, CVE-2015-8776, CVE-2015-8777, CVE-2015-8778, CVE-2015-8779, CVE-2016-2856, CVE-2016-3075

SHA-256 | 493c76ea8ce318894b316a5a208fb8df41462f866dbab930ef81d92361f8208c

Download | Favorite | View