CVE-2016-1576

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.1%

from disclosure to weapon204 days

Published on NVDMay 2

1st PoC+204d

exploitation probability

1.1%top 39% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/41763unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360 http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html https://bugs.launchpad.net/bugs/1535150 https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/http://www.openwall.com/lists/oss-security/2016/02/24/8 http://www.openwall.com/lists/oss-security/2021/10/18/1