NVD

Id
17940  
Name
CVE-2016-1576  
Description
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-05-06  
Seq
2016-1576  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98185 17940 CVE-2016-1576 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360  View
98186 17940 CVE-2016-1576 http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html  View
98187 17940 CVE-2016-1576 http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/  View
98188 17940 CVE-2016-1576 [oss-security] 20160224 Overlayfs over Fuse Privilege Escalation in USERNS  View
98189 17940 CVE-2016-1576 https://bugs.launchpad.net/bugs/1535150  View
98190 17940 CVE-2016-1576 https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch  View
98191 17940 CVE-2016-1576 https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1674 JVNDB-2016-002447 Linux Kernel の overlayfs の実装における権限を取得される脆弱性 Linux Kernel の overlayfs の実装は、マウント名前空間を適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2016-1576 88082 CVE-2016-1576 17940 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002447.html 2016-01-21 2016-05-10 View