drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2010-0747 | third party advisory |
https://www.debian.org/security/2010/dsa-2015 | third party advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573531 | exploit issue tracking third party advisory |