CVE-2014-3519

The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the file_handle structure.

• CWE-284

• http://www.openwall.com/lists/oss-security/2014/06/24/16Mailing List, Mitigation, Third Party Advisory
• http://www.securityfocus.com/bid/68171Third Party Advisory, VDB Entry
• https://help.virtuozzo.com/customer/en/portal/articles/2522783-parallels-cloud-server-6-0-update-6-hotfix-8-6-0-6-2004-Release Notes, Vendor Advisory
• https://help.virtuozzo.com/customer/en/portal/articles/2563842-cu-2-6-32-042stab090-5-parallels-virtuozzo-containers-4-7-core-updateRelease Notes, Vendor Advisory
• https://help.virtuozzo.com/customer/en/portal/articles/2563843-cu-2-6-32-042stab090-5-parallels-server-bare-metal-5-0-core-updateRelease Notes, Vendor Advisory
• https://openvz.org/Download/kernel/rhel6/042stab090.5Patch, Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2014/06/24/16Mailing List, Mitigation, Third Party Advisory
• http://www.securityfocus.com/bid/68171Third Party Advisory, VDB Entry
• https://help.virtuozzo.com/customer/en/portal/articles/2522783-parallels-cloud-server-6-0-update-6-hotfix-8-6-0-6-2004-Release Notes, Vendor Advisory
• https://help.virtuozzo.com/customer/en/portal/articles/2563842-cu-2-6-32-042stab090-5-parallels-virtuozzo-containers-4-7-core-updateRelease Notes, Vendor Advisory
• https://help.virtuozzo.com/customer/en/portal/articles/2563843-cu-2-6-32-042stab090-5-parallels-server-bare-metal-5-0-core-updateRelease Notes, Vendor Advisory
• https://openvz.org/Download/kernel/rhel6/042stab090.5Patch, Release Notes, Vendor Advisory

Published

Feb 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3513Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenS…
• CVE-2014-3514activerecord/lib/active_record/relation/query_methods.rb in …
• CVE-2014-3515The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.…
• CVE-2014-3516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3517api/metadata/handler.py in OpenStack Compute (Nova) before 2…
• CVE-2014-3518jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss…
• CVE-2014-3520OpenStack Identity (Keystone) before 2013.2.4, 2014.x before…
• CVE-2014-3521The component in (1) /luci/homebase and (2) /luci/cluster me…
• CVE-2014-3522The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x b…
• CVE-2014-3523Memory leak in the winnt_accept function in server/mpm/winnt…
• CVE-2014-3524Apache OpenOffice before 4.1.1 allows remote attackers to ex…
• CVE-2014-3525Unspecified vulnerability in Apache Traffic Server 3.x throu…