<p>Upgrade <code>Debian:12</code> <code>libcap2</code> to version 1:2.22-1 or higher.</p>

Access Restriction Bypass Affecting libcap2 package, versions <1:2.22-1

Threat Intelligence

0.04% (6^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-DEBIAN12-LIBCAP2-1549766
published 8 Feb 2014
disclosed 8 Feb 2014

Report a new vulnerability Found a mistake?

Introduced: 8 Feb 2014

CVE-2011-4099 Open this link in a new tab CWE-264 Open this link in a new tab

How to fix?

Upgrade Debian:12 libcap2 to version 1:2.22-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libcap2 package and not the libcap2 package as distributed by Debian. See How to fix? for Debian:12 relevant fixed versions and status.

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.

References

CVSS Scores

version 3.1

Attack Vector (AV)

Local
Attack Complexity (AC)

Low
Privileges Required (PR)

None
User Interaction (UI)

None

Scope (S)

Unchanged

Confidentiality (C)

Low
Integrity (I)

Low
Availability (A)

Low