cve/2014/CVE-2014-3519.md
2024-06-18 02:51:15 +02:00

840 B

CVE-2014-3519

Description

The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the file_handle structure.

POC

Reference

Github