The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perf | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernelUpgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-firmware | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-kdump-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade python-perf-debuginfoUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-bootwrapperUpgrade kernel-rt-trace-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-traceUpgrade kernel-rt-trace-develUpgrade kernel-rt-docUpgrade python-perfUpgrade perfUpgrade kernel-rtUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-doc | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-default | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-3.19.0-43-powerpc64-embUpgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-4.2.0-23-lowlatencyUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-3.19.0-43-genericUpgrade linux-image-4.2.0-23-powerpc64-smpUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-3.19.0-43-powerpc64-smp | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub