GCVE - cpe:2.3:a:criu:checkpoint\/restore_in

Approved changes feed: RSS · Atom

cpe:2.3:a:criu:checkpoint\/restore_in_userspace:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Criu (`d2e14f11-825f-5b8a-b2f7-47f9c7d251ec`)
Product	Checkpoint/Restore In Userspace (`e4b5e4dc-4807-5daf-a8f9-76738c26fd1f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-5231`	vulnerable	2026-06-08 05:06:49.298384	Details available The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access. Published: 2016-06-07T14:00:00.000Z Updated: 2024-08-06T06:41:09.020Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2015/08/25/5 http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html https://lists.openvz.org/pipermail/criu/2015-August/021847.html https://bugzilla.redhat.com/show_bug.cgi?id=1256728	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5228`	vulnerable	2026-06-08 05:06:49.292972	Details available The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path. Published: 2016-06-07T14:00:00.000Z Updated: 2024-08-06T06:41:08.520Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2015/08/25/5 http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html https://lists.openvz.org/pipermail/criu/2015-August/021847.html https://bugzilla.redhat.com/show_bug.cgi?id=1255782	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.