NVD

Id
28741  
Name
CVE-2015-8660  
Description
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-12-28  
Modified Date
2016-12-07  
Seq
2015-8660  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151261 28741 CVE-2015-8660 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545  View
151262 28741 CVE-2015-8660 SUSE-SU-2016:0751  View
151263 28741 CVE-2015-8660 SUSE-SU-2016:0752  View
151264 28741 CVE-2015-8660 SUSE-SU-2016:0755  View
151265 28741 CVE-2015-8660 http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html  View
151266 28741 CVE-2015-8660 RHSA-2016:1532  View
151267 28741 CVE-2015-8660 RHSA-2016:1539  View
151268 28741 CVE-2015-8660 RHSA-2016:1541  View
151269 28741 CVE-2015-8660 [oss-security] 20151223 CVE request -- linux kernel: overlay: fix permission checking for setattr  View
151270 28741 CVE-2015-8660 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
151271 28741 CVE-2015-8660 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
151272 28741 CVE-2015-8660 79671  View
151273 28741 CVE-2015-8660 1034548  View
151274 28741 CVE-2015-8660 USN-2857-1  View
151275 28741 CVE-2015-8660 USN-2857-2  View
151276 28741 CVE-2015-8660 USN-2858-1  View
151277 28741 CVE-2015-8660 USN-2858-2  View
151278 28741 CVE-2015-8660 USN-2858-3  View
151279 28741 CVE-2015-8660 https://bugzilla.redhat.com/show_bug.cgi?id=1291329  View
151280 28741 CVE-2015-8660 https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545  View
151281 28741 CVE-2015-8660 39166  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11250 JVNDB-2015-006570 Linux Kernel の fs/overlayfs/inode.c の ovl_setattr 関数におけるアクセス制限を回避される脆弱性 Linux Kernel の fs/overlayfs/inode.c の ovl_setattr 関数は、異なる setattr オペレーションの結合を試みるため、アクセス制限を回避され、任意のオーバーレイファイルの属性を変更される脆弱性が存在します。 CVE-2015-8660 85885 CVE-2015-8660 28741 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006570.html 2015-12-05 2016-09-06 View