Every CVE Search/ Get API key

CVE-2014-3215

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs...

6.9 MediumFix available

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.

Exploit likelihood

0.36%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.

Record
CVE-2014-3215
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.

Record
CVE-2014-3215
Updated
2026-11-02
EUVDEUVD-2014-3232 No score

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.

Record
EUVD-2014-3232
Updated
2026-11-03
GitHub AdvisoriesGHSA-h57c-m953-4q5h No score

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs...

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.

Record
GHSA-h57c-m953-4q5h
Updated
2026-11-02
OSVMGASA-2014-0251 No score

Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability:

capng_lock() in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without capabilities, which is potentially dangerous (CVE-2014-3215).

Record
MGASA-2014-0251
Updated
2026-11-02
OSVSUSE-SU-2017:0375-1 No score

Security update for libcap-ng

libcap-ng was updated to fix one security issue.

This security issue was fixed:

  • CVE-2014-3215: seunshare in policycoreutils (which uses libcap-ng) is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which made it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges (bsc#876832).
Record
SUSE-SU-2017:0375-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libcap-ng
Mageia:3
 before 0.7.3-2.1.mga3
0.7.3-2.1.mga3
libcap-ng
Mageia:4
 before 0.7.3-3.1.mga4
0.7.3-3.1.mga4
libcap-ng-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-devel
Red Hat:enterprise_linux:7::client
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-python
Red Hat:enterprise_linux:7::client
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-utils
Red Hat:enterprise_linux:7::client
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng
Red Hat:enterprise_linux:7::client
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-python
Red Hat:enterprise_linux:7::computenode
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
Show 84 moreShow less
Affected packages
PackageAffectedFixed
libcap-ng-utils
Red Hat:enterprise_linux:7::computenode
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng
Red Hat:enterprise_linux:7::computenode
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-python
Red Hat:enterprise_linux:7::server
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-utils
Red Hat:enterprise_linux:7::server
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng
Red Hat:enterprise_linux:7::server
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-devel
Red Hat:enterprise_linux:7::server
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-python
Red Hat:enterprise_linux:7::workstation
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-utils
Red Hat:enterprise_linux:7::workstation
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng
Red Hat:enterprise_linux:7::workstation
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
libcap-ng-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.7.5-4.el7
0:0.7.5-4.el7
kernel
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-devel
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-doc
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-firmware
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-headers
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf
Red Hat:enterprise_linux:6::client
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-doc
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-firmware
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-headers
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-doc
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-headers
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-doc
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-firmware
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
kernel-headers
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
perf-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
python-perf
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.32-504.16.2.el6
0:2.6.32-504.16.2.el6
libcap-ng
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.6.3-1.9.6
0.6.3-1.9.6
libcap-ng
SUSE:Linux Enterprise Server 11 SP4
 before 0.6.3-1.9.6
0.6.3-1.9.6
libcap-ng
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.6.3-1.9.6
0.6.3-1.9.6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3215 is a medium vulnerability (CVSS 6.9) in Selinuxproject Policycoreutils, published May 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in libcap-ng 0.7.3-2.1.mga3.

References

Show 52 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open