CVE-2013-1858

The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which allows local users to gain privileges by calling chroot and leveraging the sharing of the / directory between a parent process and a child process.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.69% chance of exploitation in the next 30 days, 75th percentile

Published

2013-04-05

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.openwall.com/lists/oss-security/2013/03/14/6

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2013/CVE-2013-1858

References

• CVE Record
• NVD entry

Related

• CVE-2013-1852
• CVE-2013-1861
• CVE-2013-1847
• CVE-2013-1868
• CVE-2013-1828
• CVE-2013-1884