The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-devel | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headers | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade dtrace-modulesUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernelUpgrade kernel-uekUpgrade kernel-uek-firmwareUpgrade kernel-uek-devel | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-abi-whitelistsUpgrade python-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-kdumpUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-rt-trace-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-traceUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-ppc64Upgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-doc | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2 | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-3.19.0-43-powerpc64-embUpgrade linux-image-4.2.0-23-lowlatencyUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-3.19.0-43-powerpc64-smpUpgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc64-smpUpgrade linux-image-3.19.0-43-generic | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub