CVE-2016-9867

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client (SDC) servers.

Score

CVSS 3.0 8.8 High

Status

Modified - security_alert@emc.com

Published

2017-01-06

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Scaleio (Emc)

References

• http://www.securityfocus.com/archive/1/539983/30/0/threaded
• http://www.securityfocus.com/bid/95300