Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-0386HistoryMar 22, 2023 - 9:15 p.m.
CVE-2023-0386
2023-03-2221:15:18
Debian Security Bug Tracker
security-tracker.debian.org
59
linux
overlayfs
kernel
privilege escalation
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
61.0%
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.11-1 | linux_6.1.11-1_all.deb |
| Debian | 11 | all | linux | < 5.10.179-1 | linux_5.10.179-1_all.deb |
| Debian | 999 | all | linux | < 6.1.11-1 | linux_6.1.11-1_all.deb |
| Debian | 13 | all | linux | < 6.1.11-1 | linux_6.1.11-1_all.deb |
Related
redhat
redhat
(RHSA-2023:1681) Important: kpatch-patch security update
2023-04-10 13:26:37
(RHSA-2023:1970) Important: kernel security and bug fix update
2023-04-25 09:58:00
(RHSA-2023:1691) Important: kernel-rt security and bug fix update
2023-04-11 13:44:18
nessus
nessus
Oracle Linux 9 : kernel (ELSA-2023-1703)
2023-04-13 00:00:00
RHEL 9 : kernel-rt (RHSA-2023:1980)
2023-04-25 00:00:00
RHEL 9 : kpatch-patch (RHSA-2023:1984)
2023-04-25 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2023-04-11 00:00:00
Important: kernel security and bug fix update
2023-04-11 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-04-04 00:00:00
githubexploit
githubexploit
Exploit for Improper Ownership Management in Linux Linux Kernel
2024-04-22 23:33:35
Exploit for Improper Ownership Management in Linux Linux Kernel
2023-05-16 10:26:10
Exploit for Improper Ownership Management in Linux Linux Kernel
2024-04-05 05:47:00
redhatcve
redhatcve
CVE-2023-0386
2023-03-22 09:43:06
CVE-2021-3847
2021-10-14 20:05:12
packetstorm
packetstorm
Linux OverlayFS Local Privilege Escalation
2024-09-27 00:00:00
prion
prion
Design/Logic Flaw
2023-03-22 21:15:00
cbl_mariner
cbl_mariner
CVE-2023-0386 affecting package kernel 5.10.183.1-1
2023-07-28 23:16:55
CVE-2023-0386 affecting package kernel for versions less than 5.15.107.1-2
2023-05-03 16:08:28
CVE-2023-0386 affecting package hyperv-daemons 5.10.185.1-1
2023-08-15 16:37:27
nvd
nvd
CVE-2023-0386
2023-03-22 21:15:18
osv
osv
oraclelinux
oraclelinux
kernel security and bug fix update
2023-04-12 00:00:00
kernel security, bug fix, and enhancement update
2023-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2023-0386
2023-03-22 00:00:00
zdt
zdt
Linux OverlayFS Local Privilege Escalation Exploit
2024-09-29 00:00:00
metasploit
metasploit
Local Privilege Escalation via CVE-2023-0386
2024-09-05 13:54:55
cve
cve
CVE-2023-0386
2023-03-22 21:15:18
cvelist
cvelist
CVE-2023-0386
2023-03-22 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6043-1)
2023-04-27 00:00:00
Debian: Security Advisory (DLA-3446-1)
2023-06-07 00:00:00
Debian: Security Advisory (DSA-5402-1)
2023-05-15 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-04-26 00:00:00
Linux kernel (OEM) vulnerabilities
2023-05-10 00:00:00
Kernel Live Patch Security Notice
2023-06-21 00:00:00
debian
debian
[SECURITY] [DLA 3446-1] linux-5.10 security update
2023-06-05 18:45:37
[SECURITY] [DSA 5402-1] linux security update
2023-05-13 11:20:28
rocky
rocky
kernel-rt security and bug fix update
2023-04-26 15:28:18
kernel security, bug fix, and enhancement update
2023-05-05 15:42:05
kernel security, bug fix, and enhancement update
2023-04-06 15:52:32
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-04-26 15:33:20
thn
thn
GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users
2023-07-27 13:25:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 09/27/2024
2024-09-27 19:21:52
redos
redos
ROS-20230915-10
2023-09-15 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
61.0%
Related for DEBIANCVE:CVE-2023-0386