CVE-2012-0055 OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unaut...
HighCVSS 7.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel OverlayFS | = before 3.0.0-16.28 | No fix listed |
| Linux kernel OverlayFS | = as used in Ubuntu 10.0.4 LTS and 11.10 | No fix listed |
| Linux kernel | < 3.0.0 | 3.0.0 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
References
- [oss-security] 20120117 Re: CVE Request: overlayfs exploit mailing-list patch third-party-advisory
- bugzilla.suse.com issue-tracking third-party-advisory
- access.redhat.com third-party-advisory
- www.ubuntu.com third-party-advisory
- www.ubuntu.com third-party-advisory
- www.ubuntu.com third-party-advisory
- bugs.launchpad.net exploit third-party-advisory