CVE-2015-1350

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-552

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=linux-kernel&m=142153722930533&w=2Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/24/5Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/76075Third Party Advisory, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492Exploit, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185139Issue Tracking, Patch, Third Party Advisory
http://marc.info/?l=linux-kernel&m=142153722930533&w=2Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/24/5Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/76075Third Party Advisory, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492Exploit, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1185139Issue Tracking, Patch, Third Party Advisory

Timeline

Published: May 2, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-13517.5Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows CVE-2015-13525.0The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for CVE-2015-13552.1Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cl CVE-2015-13564.4Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity pro CVE-2015-13575.0Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices wi CVE-2015-13585.0The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Po CVE-2015-13596.8Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers t CVE-2015-13607.5Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (buffer over-read) or possibly have CVE-2015-13616.8platform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does not initialize a variable that is used in CVE-2015-13627.5Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string CVE-2015-13634.3Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML CVE-2015-13647.5SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote at