OverlayFS in the Linux kernel before 3.0.0-16.28, as used in …
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
References
- [oss-security] 20120117 Re: CVE Request: overlayfs x_refsource_MLIST mailing-list
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2012-0055 x_refsource_MISC
- http://www.ubuntu.com/usn/USN-1363-1 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1364-1 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1384-1 x_refsource_CONFIRM
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 x_refsource_CONFIRM
- [oss-security] 20120117 Re: CVE Request: overlayfs x_refsource_MLIST mailing-list x_transferred
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 x_transferred x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2012-0055 x_transferred x_refsource_MISC
- http://www.ubuntu.com/usn/USN-1363-1 x_transferred x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1364-1 x_transferred x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1384-1 x_transferred x_refsource_CONFIRM
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 x_transferred x_refsource_CONFIRM
- [oss-security] 20120117 Re: CVE Request: overlayfs x_refsource_MLIST mailing-list
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2012-0055 x_refsource_MISC
- http://www.ubuntu.com/usn/USN-1363-1 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1364-1 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1384-1 x_refsource_CONFIRM
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1364-1 x_transferred x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-1384-1 x_transferred x_refsource_CONFIRM
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 x_transferred x_refsource_CONFIRM
- [oss-security] 20120117 Re: CVE Request: overlayfs x_refsource_MLIST mailing-list x_transferred
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 x_transferred x_refsource_MISC
- https://access.redhat.com/security/cve/cve-2012-0055 x_transferred x_refsource_MISC
- http://www.ubuntu.com/usn/USN-1363-1 x_transferred x_refsource_CONFIRM
Affected products
OverlayFS
- ==as used in Ubuntu 10.0.4 LTS and 11.10
- ==before 3.0.0-16.28
Matching in nixpkgs
Package maintainers
-
@saschagrunert Sascha Grunert <mail@saschagrunert.de>
-
@vdemeester Vincent Demeester <vincent@sbr.pm>
-
@sphaugh Sean Haugh <sean@lfo.team>