Improper access control in linux-vanilla (Alpine package)

1) Improper access control

EUVDB-ID: #VU32330

Risk: Low

CVSSv4.0: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2015-8550

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: Yes

Description

The vulnerability allows a local privileged user to execute arbitrary code.

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

Mitigation

Install update from vendor's website.

Vulnerable software versions

linux-vanilla (Alpine package): 3.14.51-r0 - 4.1.39-r0

linux-grsec (Alpine package): 3.14.51-r0 - 4.1.39-r0

CPE2.3

• cpe:2.3:o:alpine:linux-vanilla_alpine_package:3.14.51-r0:*:*:*:*:alpine_linux:*:3.1
• cpe:2.3:o:alpine:linux-vanilla_alpine_package:3.18.22-r1:*:*:*:*:alpine_linux:*:3.2
• cpe:2.3:o:alpine:linux-vanilla_alpine_package:4.1.39-r0:*:*:*:*:alpine_linux:*:3.3
• cpe:2.3:o:alpine:linux-grsec_alpine_package:3.14.51-r0:*:*:*:*:alpine_linux:*:3.1
• cpe:2.3:o:alpine:linux-grsec_alpine_package:3.18.21-r2:*:*:*:*:alpine_linux:*:3.2
• cpe:2.3:o:alpine:linux-grsec_alpine_package:4.1.39-r0:*:*:*:*:alpine_linux:*:3.3

External links

https://git.alpinelinux.org/aports/commit/?id=308e70ec22018c4261570b300675d9145dfea9f0
https://git.alpinelinux.org/aports/commit/?id=06df930789bedccfba2146420a9f2f943e9015f2
https://git.alpinelinux.org/aports/commit/?id=a148c910b9b3d31765e4d315b0db4f5195ffeb82
https://git.alpinelinux.org/aports/commit/?id=5de48aa6054001fbbb268a8b9dfde035c7478b6a
https://git.alpinelinux.org/aports/commit/?id=ed9dc5651926188f0fe277a0e5a51961ee5545f1
https://git.alpinelinux.org/aports/commit/?id=7e224e4ae1720e18573440dfbecc06d0b2fdee56
https://git.alpinelinux.org/aports/commit/?id=a145cb0cac7f44ec96bad04dc0dadd4d8c6f632b

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.