The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-devel | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade dtrace-modulesUpgrade kernel-uek-docUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade kernelUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmware | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-kdumpUpgrade kernel-rt-trace-develUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-docUpgrade kernel-rt-debug-develUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-develUpgrade kernel-bootwrapperUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-rt-trace | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade cluster-md-kmp-default | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-3.19.0-43-powerpc64-embUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-4.2.0-23-lowlatencyUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc64-smpUpgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc64-smpUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-3.19.0-43-generic | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub