A vulnerability was found in Linux Kernel up to 4.5.2 (Operating System) and classified as critical. Affected by this issue is some unknown processing of the component overlayfs. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality, integrity, and availability.

The weakness was presented 05/02/2016 (Website). The advisory is available at launchpadlibrarian.net. This vulnerability is handled as CVE-2016-1576. Local access is required to approach this attack. Required for exploitation is a simple authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 88895 (Ubuntu 14.04 LTS : linux vulnerabilities (USN-2907-1)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Ubuntu Local Security Checks and running in the context local. The commercial vulnerability scanner Qualys is able to test this issue with plugin 196406 (Ubuntu Security Notification for Linux-lts-utopic Vulnerabilities (USN-2909-1)).

Upgrading eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (88895). See 83137 for similar entry.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion