REDHAT-BUG-815188
First published: Mon Apr 23 2012(Updated: )
Vadim Ponomarev (ccrssaa at karelia.ru), report a pid namespace leak caused by vsftpd. Detailed discussion can be found in: <a href="https://bugzilla.novell.com/show_bug.cgi?id=757783">https://bugzilla.novell.com/show_bug.cgi?id=757783</a> Introduced by: <a href="http://git.kernel.org/linus/423e0ab086ad8b33626e45fa94ac7613146b7ffa">http://git.kernel.org/linus/423e0ab086ad8b33626e45fa94ac7613146b7ffa</a> Upstream commit: <a href="http://git.kernel.org/linus/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1">http://git.kernel.org/linus/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1</a> Steps to reproduce: <a href="https://bugzilla.novell.com/show_bug.cgi?id=757783#c0">https://bugzilla.novell.com/show_bug.cgi?id=757783#c0</a> Acknowledgements: Red Hat would like to thank Vadim Ponomarev for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| vsftpd |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.novell.com/show_bug.cgi?id=757783
- http://git.kernel.org/linus/423e0ab086ad8b33626e45fa94ac7613146b7ffa
- http://git.kernel.org/linus/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1
- https://bugzilla.novell.com/show_bug.cgi?id=757783#c0
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=815192
- https://bugzilla.redhat.com/show_bug.cgi?id=815188
Frequently Asked Questions
What is the severity of REDHAT-BUG-815188?
The severity of REDHAT-BUG-815188 is considered medium due to the potential for a pid namespace leak.
How do I fix REDHAT-BUG-815188?
To fix REDHAT-BUG-815188, update vsftpd to the latest available version provided by the vendor.
What causes the vulnerability REDHAT-BUG-815188?
The vulnerability REDHAT-BUG-815188 is caused by a flaw in the vsftpd that leads to a namespace leak.
Is REDHAT-BUG-815188 being actively addressed?
Yes, REDHAT-BUG-815188 is being addressed through patches and updates from the vsftpd maintainers.
Who reported the vulnerability REDHAT-BUG-815188?
The vulnerability REDHAT-BUG-815188 was reported by Vadim Ponomarev.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-2127
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/vsftpd
- canonical/vsftpd