Vulnerability in Canonical Ubuntu Linux

CVE-2014-1421

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

EPSS: 0.005 (40.4th percentile) — read the EPSS interpretation.

Affected products

Canonical Ubuntu_linux — versions 14.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)