Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CRIU 安全漏洞
Vulnerability Description
CRIU（Checkpoint/Restore In Userspace）是一套在Linux用户空间（userspace）上实现了checkpoint/restore功能的软件冻结和恢复执行工具。该工具支持冻结或者部分冻结一个应用程序的执行，并将其执行状态保存到磁盘中一系列文件中，也可以使用这些文件来恢复继续运行这个应用程序。 CRIU的服务守护进程中存在安全漏洞，该漏洞源于程序没有限制访问non-dumpable进程。本地攻击者可借助进程转储或ptrace访问权限利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A