High severity · published Sep 8, 2017
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Leap · Opensuse
42.1 · source: NVD
SL
Suse Linux Enterprise Desktop · Novell
12.0 · source: NVD
SL
Suse Linux Enterprise Server · Novell
12.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5759
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5759
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html
lists.suse.com
http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html
More from Suse Linux Enterprise Desktop
9.8
CVE-2015-3043
Adobe Flash Player Memory Corruption Vulnerability
9.8
CVE-2016-9961
game-music-emu before 0.6.1 mishandles unspecified integer values
8.8
CVE-2016-2834
Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and…
8.8
CVE-2016-2818
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service…
8.8
CVE-2016-2815
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application…