The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade python-perf | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernelUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade dtrace-modulesUpgrade kernel-uek-debug-devel | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-kdumpUpgrade kernelUpgrade kernel-develUpgrade kernel-kdump-develUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-trace-develUpgrade kernel-rtUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade python-perfUpgrade kernel-rt-docUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-docUpgrade perf-debuginfoUpgrade kernel-kdump-debuginfoUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-trace | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade dlm-kmp-default | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc64-smpUpgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc64-smpUpgrade linux-image-3.19.0-43-genericUpgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc64-embUpgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-4.2.0-23-lowlatency | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub