CVEvulnerability
CVE-2016-2853
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-05-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
Affected configurations
• linux linux kernel (>= 3.0.0 <= 3.19.8)
• linux linux kernel (>= 4.0.0 <= 4.20.15)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/ Exploit, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/24/9 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/18/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/96839 Broken Link
- https://sourceforge.net/p/aufs/mailman/message/34864744/ Third Party Advisory
- http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/ Exploit, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/24/9 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/18/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/96839 Broken Link
- https://sourceforge.net/p/aufs/mailman/message/34864744/ Third Party Advisory