Approved changes feed: RSS · Atom

cpe:2.3:a:selinuxproject:policycoreutils:2.2.5:*:*:*:*:*:*:*

part: a version: 2.2.5 update: *

VendorSelinuxproject (01ffb86a-4493-5827-9137-301a070fce99)
ProductPolicycoreutils (73699794-b994-5af2-89f4-3ae417bb2ff1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/policycoreutils purl2cpe 2026-06-01 10:12:28.745589
pkg:deb/ubuntu/policycoreutils purl2cpe 2026-06-01 10:12:28.745591
pkg:github/selinuxproject/selinux purl2cpe 2026-06-01 10:12:28.745592
pkg:gitlab/redhat/policycoreutils purl2cpe 2026-06-01 10:12:28.745593
pkg:rpm/centos/policycoreutils purl2cpe 2026-06-01 10:12:28.745595
pkg:rpm/fedora/policycoreutils purl2cpe 2026-06-01 10:12:28.745596
pkg:rpm/opensuse/policycoreutils purl2cpe 2026-06-01 10:12:28.745597

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3215 vulnerable 2026-06-08 05:05:31.893655 Details available
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.
Published: 2014-05-08T10:00:00.000Z
Updated: 2024-08-06T10:35:57.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.