high7.8Public exploit code
CVE-2016-2853
The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an auf…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AUFS (Ubuntu 15.10) - 'allow_userns' Fuse/Xattr User Namespaces Privilege Escalation2016-02-19 · local · linux
Impact
The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.0.0 through 3.19.8 from 4.0.0 through 4.20.15 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/
- http://www.openwall.com/lists/oss-security/2016/02/24/9
- http://www.openwall.com/lists/oss-security/2021/10/18/1
- http://www.securityfocus.com/bid/96839
- https://sourceforge.net/p/aufs/mailman/message/34864744/
- http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/
- http://www.openwall.com/lists/oss-security/2016/02/24/9
- http://www.openwall.com/lists/oss-security/2021/10/18/1
- http://www.securityfocus.com/bid/96839
- https://sourceforge.net/p/aufs/mailman/message/34864744/