VulnerabilityModified
CVE-2008-5393
UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays.
HIGH 10.0EPSS 2.35%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.35% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- privacy-cd/unbuntu privacy remix
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/4696
- http://www.securityfocus.com/archive/1/498905/100/0/threaded
- http://www.securityfocus.com/bid/32629Patch
- https://bugs.launchpad.net/bugs/301285Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47082
- http://securityreason.com/securityalert/4696
- http://www.securityfocus.com/archive/1/498905/100/0/threaded
- http://www.securityfocus.com/bid/32629Patch
- https://bugs.launchpad.net/bugs/301285Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47082
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.