CVE-2014-4014

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.

• CWE-264

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=23adbe12ef7d3d4195e80800ab36b37bee28cd03
• http://secunia.com/advisories/59220Third Party Advisory
• http://www.exploit-db.com/exploits/33824Third Party Advisory, VDB Entry
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
• http://www.openwall.com/lists/oss-security/2014/06/10/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/67988Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030394Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1107966Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03Third Party Advisory
• https://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=23adbe12ef7d3d4195e80800ab36b37bee28cd03
• http://secunia.com/advisories/59220Third Party Advisory
• http://www.exploit-db.com/exploits/33824Third Party Advisory, VDB Entry
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8Vendor Advisory
• http://www.openwall.com/lists/oss-security/2014/06/10/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/67988Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030394Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1107966Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/23adbe12ef7d3d4195e80800ab36b37bee28cd03Third Party Advisory
• https://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory

Published

Jun 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4008SAP Web Services Tool (CA-WUI-WST) has hardcoded credentials…
• CVE-2014-4009SAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, …
• CVE-2014-4010SAP Transaction Data Pool has hardcoded credentials, which m…
• CVE-2014-4011SAP Capacity Leveling has hardcoded credentials, which makes…
• CVE-2014-4012SAP Open Hub Service has hardcoded credentials, which makes …
• CVE-2014-4013SQL injection vulnerability in the Policy Manager in Aruba N…
• CVE-2014-4017Cross-site scripting (XSS) vulnerability in the Conversion N…
• CVE-2014-4018The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK h…
• CVE-2014-4019ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK store…7.5
• CVE-2014-4020The dissect_frame function in epan/dissectors/packet-frame.c…
• CVE-2014-4021Xen 3.2.x through 4.4.x does not properly clean memory pages…
• CVE-2014-4022The alloc_domain_struct function in arch/arm/domain.c in Xen…