CVE-2014-4014

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=23adbe12ef7d3d4195e80800ab36b37bee28cd03
http://secunia.com/advisories/59220Third Party Advisory
http://www.exploit-db.com/exploits/33824Third Party Advisory, VDB Entry
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/06/10/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/67988Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030394Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1107966Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03Third Party Advisory
https://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=23adbe12ef7d3d4195e80800ab36b37bee28cd03
http://secunia.com/advisories/59220Third Party Advisory
http://www.exploit-db.com/exploits/33824Third Party Advisory, VDB Entry
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/06/10/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/67988Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030394Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1107966Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03Third Party Advisory
https://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory

Timeline

Published: Jun 23, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-40174.3Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script CVE-2014-40187.8The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for CVE-2014-40197.5ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, whi CVE-2014-40204.3The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negat CVE-2014-40212.7Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive in CVE-2014-40222.7The alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM platform, does not properly initialize the struct CVE-2014-40234.3Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link C CVE-2014-40245.9SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 befo CVE-2014-40272.3The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain CVE-2014-40306.8Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the aut CVE-2014-40314.0The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allo CVE-2014-40324.3Cross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary