Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a result, if the descendant process crashes and core_pattern is set to a relative value, its core dump is stored in the current directory with uid:gid permissions. An unprivileged local user with eligible root SUID binary could use this flaw to place core dumps into root-owned directories, potentially resulting in escalation of privileges.
CVSS Information
N/A
Vulnerability Type
访问控制不恰当
Vulnerability Title
Linux kernel 访问控制错误漏洞
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于当某些 SUID 二进制文件执行其后代时，在处理可转储标志设置的方式中发现了一个缺陷。先决条件是 SUID 二进制文件，它将实际 UID 设置为有效 UID，将实际 GID 设置为等于有效 GID。然后，子体的可转储值将设置为 1。因此，如果后代进程崩溃，并且core_pattern设置为相对值，则其核心转储将存储在具有 uid：gid 权限的当前目录中。具有符合条件的根
CVSS Information
N/A
Vulnerability Type
N/A