CVE Kennung:	CVE-2015-2925
Beschreibung:	The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."
Test Kennungen:	1.3.6.1.4.1.25623.1.0.703364   1.3.6.1.4.1.25623.1.0.703372   1.3.6.1.4.1.25623.1.0.105517
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2925 BugTraq ID: 73926 http://www.securityfocus.com/bid/73926 Debian Security Information: DSA-3364 (Google Search) http://www.debian.org/security/2015/dsa-3364 Debian Security Information: DSA-3372 (Google Search) http://www.debian.org/security/2015/dsa-3372 http://permalink.gmane.org/gmane.linux.kernel.containers/29173 http://permalink.gmane.org/gmane.linux.kernel.containers/29177 http://www.openwall.com/lists/oss-security/2015/04/04/4 RedHat Security Advisories: RHSA-2015:2636 http://rhn.redhat.com/errata/RHSA-2015-2636.html RedHat Security Advisories: RHSA-2016:0068 http://rhn.redhat.com/errata/RHSA-2016-0068.html SuSE Security Announcement: SUSE-SU-2015:2194 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html SuSE Security Announcement: SUSE-SU-2015:2292 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html SuSE Security Announcement: SUSE-SU-2016:0335 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html SuSE Security Announcement: SUSE-SU-2016:0337 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html SuSE Security Announcement: SUSE-SU-2016:0380 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html SuSE Security Announcement: SUSE-SU-2016:0381 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html SuSE Security Announcement: SUSE-SU-2016:0383 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html SuSE Security Announcement: SUSE-SU-2016:0384 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html SuSE Security Announcement: SUSE-SU-2016:0386 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html SuSE Security Announcement: SUSE-SU-2016:0387 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html SuSE Security Announcement: SUSE-SU-2016:0434 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html http://www.ubuntu.com/usn/USN-2792-1 http://www.ubuntu.com/usn/USN-2794-1 http://www.ubuntu.com/usn/USN-2795-1 http://www.ubuntu.com/usn/USN-2798-1 http://www.ubuntu.com/usn/USN-2799-1