The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernel-uek-doc | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-kdump-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-docUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-bootwrapperUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-kdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-traceUpgrade kernel-docUpgrade python-perfUpgrade perf | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-devel | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-3.19.0-43-powerpc64-smpUpgrade linux-image-4.2.0-23-powerpc64-smpUpgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-3.19.0-43-genericUpgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-4.2.0-23-lowlatencyUpgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc64-emb | Feb 2, 2016 | Dec 28, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub