Veille CVE
CVE-2021-3493
7.8 Élevée Exploitée activementCatalogue CISA KEV — Linux Kernel Privilege Escalation Vulnerability
Ajoutée le 20/10/2022 · Échéance de correction (agences US) : 10/11/2022
Action requise : Apply updates per vendor instructions.
Description
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | security@ubuntu.com | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.2 Élevée | nvd@nist.gov (NVD) | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/162866/Ubuntu-OverlayFS-Local-Privilege-Escalation.html Press/Media CoverageThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/165151/Ubuntu-Overlayfs-Local-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52 Mailing ListPatchThird Party Advisory
- https://ubuntu.com/security/notices/USN-4917-1 Vendor Advisory
- https://www.openwall.com/lists/oss-security/2021/04/16/1 Mailing ListThird Party Advisory
- http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/162866/Ubuntu-OverlayFS-Local-Privilege-Escalation.html Press/Media CoverageThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/165151/Ubuntu-Overlayfs-Local-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52 Mailing ListPatchThird Party Advisory
- https://ubuntu.com/security/notices/USN-4917-1 Vendor Advisory
- https://www.openwall.com/lists/oss-security/2021/04/16/1 Mailing ListThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3493 US Government Resource