CVE-2016-1575 in Linux

Riassunto

di MITRE

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 12/01/2016
• Divulgazione: 02/05/2016
• Moderazione: accettato
• Voce: VDB-83137
• CPE: pronto
• CWE: CWE-264 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.8 (NVD)
• EPSS: 0.00923
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1575
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1575
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1575/