Criu: >> Checkpoint/restore In Userspace Security Vulnerabilities
The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.
CVSS Score
5.5
EPSS Score
0.001
Published
2016-06-07
The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.
CVSS Score
7.8
EPSS Score
0.001
Published
2016-06-07