CVEvulnerability
CVE-2018-16597
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-863
Description
An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.
Affected configurations
• linux linux kernel (< 4.8)
• netapp active iq performance analytics services
• netapp element software
• opensuse leap 42.3
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html packetstormsecurity.com
- http://www.securityfocus.com/bid/105394 Third Party Advisory, VDB Entry
- https://bugzilla.suse.com/show_bug.cgi?id=1106512 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862 Patch, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jul/33 seclists.org
- https://security.netapp.com/advisory/ntap-20190204-0001/ Patch, Third Party Advisory
- https://support.f5.com/csp/article/K22691834 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html packetstormsecurity.com
- http://www.securityfocus.com/bid/105394 Third Party Advisory, VDB Entry
- https://bugzilla.suse.com/show_bug.cgi?id=1106512 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862 Patch, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jul/33 seclists.org
- https://security.netapp.com/advisory/ntap-20190204-0001/ Patch, Third Party Advisory
- https://support.f5.com/csp/article/K22691834 Third Party Advisory