CVE-2014-3519: Medium severity openvz vzctl vulnerability

Published Feb 1, 2018

Updated

The openbyhandleat function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAPDACREADSEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the filehandle structure.

Affected Software

1 affected component

OpenVZ vzkernel=2.6.32

Remediation

Patch Available

https://openvz.org/Download/kernel/rhel6/042stab090.5

Event History

Feb 1, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3519?

CVE-2014-3519 has a medium severity rating of 6.5 according to the CVSS 3.0 scoring system.

How do I fix CVE-2014-3519?

You can fix CVE-2014-3519 by applying the available patch for OpenVZ vzkernel.

Who is affected by CVE-2014-3519?

CVE-2014-3519 affects local container users of OpenVZ vzkernel versions before 042stab090.5 using simfs.

What is the nature of the vulnerability in CVE-2014-3519?

CVE-2014-3519 allows local container users with specific capabilities to bypass intended file access protections.

When was CVE-2014-3519 published?

CVE-2014-3519 was published on February 1, 2018.