SecuritySpace - CVE-2014-5206

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-5206

Description: The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-5206
BugTraq ID: 69214
http://www.securityfocus.com/bid/69214
http://www.openwall.com/lists/oss-security/2014/08/13/4
http://www.ubuntu.com/usn/USN-2317-1
http://www.ubuntu.com/usn/USN-2318-1

CVE ID:	CVE-2014-5206
Description:	The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5206 BugTraq ID: 69214 http://www.securityfocus.com/bid/69214 http://www.openwall.com/lists/oss-security/2014/08/13/4 http://www.ubuntu.com/usn/USN-2317-1 http://www.ubuntu.com/usn/USN-2318-1