high7.8Public exploit code
CVE-2012-0055
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypas…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OverlayFS inode Security Checks - 'inode.c' Local Security Bypass2012-01-17 · local · linux · Verified
Impact
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 3.0.0 |
| Canonical | Ubuntu Linux | Versions 10.04, 11.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2012/01/17/11
- http://www.ubuntu.com/usn/USN-1363-1
- http://www.ubuntu.com/usn/USN-1364-1
- http://www.ubuntu.com/usn/USN-1384-1
- https://access.redhat.com/security/cve/cve-2012-0055
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055
- http://www.openwall.com/lists/oss-security/2012/01/17/11
- http://www.ubuntu.com/usn/USN-1363-1
- http://www.ubuntu.com/usn/USN-1364-1
- http://www.ubuntu.com/usn/USN-1384-1
- https://access.redhat.com/security/cve/cve-2012-0055
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055