high7.8Public exploit code
CVE-2015-1328
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel (Ubuntu / Fedora / RedHat) - 'Overlayfs' Local Privilege Escalation (Metasploit)2016-11-02 · local · linux · Verified
- Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation (Access /etc/shadow)2015-06-16 · local · linux · Verified
- Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation2015-06-16 · local · linux · Verified
Impact
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | through 15.04 |
| Linux | Linux Kernel | through 3.19 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2015/q2/717
- http://www.exploit-db.com/exploits/40688/
- http://www.securityfocus.com/bid/75206
- https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.html
- https://security-tracker.debian.org/tracker/CVE-2015-1328
- https://www.exploit-db.com/exploits/37292/
- http://seclists.org/oss-sec/2015/q2/717
- http://www.exploit-db.com/exploits/40688/
- http://www.securityfocus.com/bid/75206
- https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.html
- https://security-tracker.debian.org/tracker/CVE-2015-1328
- https://www.exploit-db.com/exploits/37292/