CVE-2015-8660 The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and mo...
MediumCVSS 6.7
EPSS 22.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.3.3-3 | 4.3.3-3 |
| debian/linux(Debian:13) | < 4.3.3-3 | 4.3.3-3 |
| debian/linux(Debian:14) | < 4.3.3-3 | 4.3.3-3 |
| Linux kernel | >= 3.18, < 3.18.31 | 3.18.31 |
| Linux kernel | >= 3.19, < 4.1.22 | 4.1.22 |
| Linux kernel | >= 4.2, < 4.4 | 4.4 |
References
- Debian Security Tracker CVE-2015-8660 vendor-advisory
- git.kernel.org vendor-advisory
- SUSE-SU-2016:0751 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0752 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0755 mailing-list third-party-advisory vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- RHSA-2016:1532 third-party-advisory vendor-advisory
- RHSA-2016:1539 third-party-advisory vendor-advisory
- RHSA-2016:1541 third-party-advisory vendor-advisory
- [oss-security] 20151223 CVE request -- linux kernel: overlay: fix permission checking for setattr mailing-list third-party-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 79671 third-party-advisory vdb-entry
- 1034548 third-party-advisory vdb-entry
- USN-2857-1 third-party-advisory vendor-advisory
- USN-2857-2 third-party-advisory vendor-advisory
- USN-2858-1 third-party-advisory vendor-advisory
- USN-2858-2 third-party-advisory vendor-advisory
- USN-2858-3 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com vendor-advisory
- 39166 exploit third-party-advisory vdb-entry
- 39230 exploit third-party-advisory vdb-entry
- 40688 exploit third-party-advisory vdb-entry