Open main menu

OpenVZ Virtuozzo Containers Wiki β

Download/kernel/rhel5/028stab122.4/changes

< Download‎ | kernel‎ | rhel5‎ | 028stab122.4
Revision as of 14:56, 29 September 2017 by Vvs (talk | contribs) (Created page with "== Changes == Since {{kernel link|rhel5|028stab122.3}}: * [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was b...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

ChangesEdit

Since 028stab122.3:

  • [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253)

See alsoEdit