The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-12-09 10:55
Updated : 2018-04-27 18:29
NVD link : CVE-2013-2929
Mitre link : CVE-2013-2929
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
linux
- linux_kernel