CVE-2015-1328 The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory...
HighCVSS 7.8
EPSS 37.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | <= 15.04 | No fix listed |
| Linux kernel | <= 3.19 | No fix listed |
References
- Debian Security Tracker CVE-2015-1328 third-party-advisory vendor-advisory
- [oss-security] 20150616 CVE-2015-1328: incorrect permission checks in overlayfs, ubuntu local root mailing-list third-party-advisory
- 40688 exploit vdb-entry
- 75206 third-party-advisory vdb-entry
- people.canonical.com vendor-advisory
- 37292 exploit