CVE-2011-4080 | Date: (C)2012-05-24 (M)2023-12-22 |
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
CVSS Score and Metrics +CVSS Score and Metrics -CVSS V2 Severity: |
CVSS Score : 4.0 |
Exploit Score: 1.9 |
Impact Score: 6.9 |
|
CVSS V2 Metrics: |
Access Vector: LOCAL |
Access Complexity: HIGH |
Authentication: NONE |
Confidentiality: COMPLETE |
Integrity: NONE |
Availability: NONE |
| |