Published: 02/05/2016 Updated: 18/04/2022

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The overlayfs implementation in the Linux kernel up to and including 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu core 15.04
canonical ubuntu touch 15.04
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 15.10
canonical ubuntu linux 16.10
linux linux kernel

USN-2908-2 introduced a regression in the Ubuntu 1510 Linux kernel backported to Ubuntu 1404 LTS ...

USN-2908-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2909-1 introduced a regression in the Ubuntu 1410 Linux kernel backported to Ubuntu 1404 LTS ...

USN-2910-1 introduced a regression in the Ubuntu 1504 Linux kernel backported to Ubuntu 1404 LTS ...

Several security issues were fixed in the kernel ...

Source: wwwhalfdognet/Security/2016/OverlayfsOverFusePrivilegeEscalation/ ## Introduction Problem description: On Ubuntu Wily it is possible to place an USERNS overlayfs mount over a fuse mount The fuse filesystem may contain SUID binaries, but those cannot be used to gain privileges due to nosuid mount options But when touching such a ...

oss-sec mailing list archives   By Date By Thread </form>    Re: CVE-2021-3847: OverlayFS - Potential Privilege Escalation using overlays copy_up  <!--X-Head-of ...

NVD-CWE-noinfo https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch http://www.openwall.com/lists/oss-security/2016/02/24/8 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360 http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/https://bugs.launchpad.net/bugs/1535150 https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html http://www.openwall.com/lists/oss-security/2021/10/18/1 https://nvd.nist.gov https://www.exploit-db.com/exploits/41763/https://usn.ubuntu.com/2908-5/

CVE-2016-1576

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect