CVE-2015-1328

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file…

published November 28, 2016

CVSS
—
EPSS
38%
Percentile
98.5
In the wild
Unconfirmed
What it is

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37679 · 98.5th percentile
Published
2016-11-28T03:01Z
EPSS history
Timeline
  • 28 NOV 03:01Z
    The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file…
    cvelistv5