7.2

CVE-2015-8660

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.18 < 3.18.31
Linux ≫ Linux Kernel Version >= 3.19 < 4.1.22
Linux ≫ Linux Kernel Version >= 4.2 < 4.4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.37% 0.974
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html
Third Party Advisory
Mailing List
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545
Vendor Advisory
http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html
Third Party Advisory
VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-1532.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1539.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1541.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/23/5
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/79671
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034548
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2857-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2857-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-2858-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2858-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-2858-3
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1291329
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545
Vendor Advisory
https://www.exploit-db.com/exploits/39166/
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/39230/
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/40688/
Third Party Advisory
VDB Entry