Arbitrary File Access Vulnerability in OpenVZ Modification for Linux Kernel 2.6.32

Arbitrary File Access Vulnerability in OpenVZ Modification for Linux Kernel 2.6.32

CVE-2014-3519 · MEDIUM Severity

AV:L/AC:L/AU:N/C:C/I:N/A:N

The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the file_handle structure.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.