CVE-2016-2853

HIGH7.8

The aufs module for the Linux kernel 3

Published May 2, 2016

Modified 1 years ago

Details

The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

References

WEBhttp://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/WEBhttp://www.openwall.com/lists/oss-security/2016/02/24/9 WEBhttp://www.openwall.com/lists/oss-security/2021/10/18/1 WEBhttp://www.securityfocus.com/bid/96839 WEBhttps://sourceforge.net/p/aufs/mailman/message/34864744/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2016-2853

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedMay 2, 2016

ModifiedAug 5, 2024