CVE-2016-1576

Опубликовано: 02 мая 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360
Mailing List
Patch
Vendor Advisory
http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html
Third Party Advisory
http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/24/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/18/1
Mailing List
Third Party Advisory
https://bugs.launchpad.net/bugs/1535150
Third Party Advisory
https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch
Mailing List
Patch
Third Party Advisory
https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch
Mailing List
Patch
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360
Mailing List
Patch
Vendor Advisory
http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html
Third Party Advisory
http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/24/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/18/1
Mailing List
Third Party Advisory
https://bugs.launchpad.net/bugs/1535150
Third Party Advisory
https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch
Mailing List
Patch
Third Party Advisory
https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_core:15.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_touch:15.04:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.5.2 (включая)

EPSS

Процентиль: 57%

0.00352

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-1576

CVSS3: 7.8

ubuntu

почти 10 лет назад

CVE-2016-1576

CVSS3: 7.8

debian

почти 10 лет назад

The overlayfs implementation in the Linux kernel through 4.5.2 does no ...

GHSA-6774-jh98-f2hq

CVSS3: 7.8

github

больше 3 лет назад

EPSS

Процентиль: 57%

0.00352

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo