Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2909-1
HistoryFeb 22, 2016 - 12:00 a.m.

Linux kernel (Utopic HWE) vulnerabilities

2016-02-2200:00:00
ubuntu.com
49

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • linux-lts-utopic - Linux hardware enablement kernel from Utopic

Details

halfdog discovered that OverlayFS, when mounting on top of a FUSE mount,
incorrectly propagated file attributes, including setuid. A local
unprivileged attacker could use this to gain privileges. (CVE-2016-1576)

halfdog discovered that OverlayFS in the Linux kernel incorrectly
propagated security sensitive extended attributes, such as POSIX ACLs. A
local unprivileged attacker could use this to gain privileges.
(CVE-2016-1575)

It was discovered that the Linux kernel’s Filesystem in Userspace (FUSE)
implementation did not handle initial zero length segments properly. A
local attacker could use this to cause a denial of service (unkillable
task). (CVE-2015-8785)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlinux-image-3.16.0-62-generic< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchblock-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchcrypto-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfat-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfb-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfirewire-core-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfloppy-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfs-core-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchfs-secondary-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Ubuntu14.04noarchinput-modules-3.16.0-62-generic-di< 3.16.0-62.82~14.04.1UNKNOWN
Rows per page:
1-10 of 571

Related

openvas 29
nessus 34
ubuntu 12
cloudfoundry 1
cve 3
ubuntucve 3
debiancve 3
cvelist 3
prion 3
nvd 3
redhatcve 2
exploitdb 2
zdt 2
debian 3
osv 2
thn 1
suse 10
oraclelinux 2
openvas
openvas
Ubuntu: Security Advisory (USN-2909-1)
2016-02-23 00:00:00
Ubuntu: Security Advisory (USN-2909-2)
2016-02-28 00:00:00
Ubuntu: Security Advisory (USN-2908-3)
2016-02-23 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) regression (USN-2909-2)
2016-02-29 00:00:00
Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2909-1)
2016-02-23 00:00:00
Ubuntu 15.10 : linux regression (USN-2908-4)
2016-02-29 00:00:00
ubuntu
ubuntu
Linux kernel (Utopic HWE) regression
2016-02-27 00:00:00
Linux kernel (Raspberry Pi 2) vulnerabilities
2016-02-22 00:00:00
Linux kernel (Wily HWE) regression
2016-02-27 00:00:00
cloudfoundry
cloudfoundry
USN-2910-1 Linux kernel vulnerability | Cloud Foundry
2016-02-26 00:00:00
cve
cve
CVE-2015-8785
2016-02-08 03:59:07
CVE-2016-1575
2016-05-02 10:59:23
CVE-2016-1576
2016-05-02 10:59:24
ubuntucve
ubuntucve
CVE-2015-8785
2015-12-31 00:00:00
CVE-2016-1575
2016-02-22 00:00:00
CVE-2016-1576
2016-02-22 00:00:00
debiancve
debiancve
CVE-2015-8785
2016-02-08 03:59:07
CVE-2016-1575
2016-05-02 10:59:23
CVE-2016-1576
2016-05-02 10:59:24
cvelist
cvelist
CVE-2015-8785
2016-02-08 02:00:00
CVE-2016-1575
2016-05-02 10:00:00
CVE-2016-1576
2016-05-02 10:00:00
prion
prion
Design/Logic Flaw
2016-02-08 03:59:00
Directory traversal
2016-05-02 10:59:00
Design/Logic Flaw
2016-05-02 10:59:00
nvd
nvd
CVE-2015-8785
2016-02-08 03:59:07
CVE-2016-1575
2016-05-02 10:59:23
CVE-2016-1576
2016-05-02 10:59:24
redhatcve
redhatcve
CVE-2016-1575
2016-12-06 15:19:09
CVE-2016-1576
2016-12-06 15:19:40
exploitdb
exploitdb
Ubuntu 14.04/15.10 - User Namespace Overlayfs Xattr SetGID Privilege Escalation
2016-11-22 00:00:00
Ubuntu 15.10 - &#039;USERNS &#039; Overlayfs Over Fuse Privilege Escalation
2016-11-22 00:00:00
zdt
zdt
Ubuntu 14.04/15.10 - User Namespace Overlayfs Xattr Setgid Privilege Escalation Vulnerability
2017-03-29 00:00:00
Ubuntu 15.10 - USERNS Overlayfs Over Fuse Privilege Escalation Vulnerability
2017-03-29 00:00:00
debian
debian
[SECURITY] [DLA 412-1] linux-2.6 security update
2016-02-06 15:28:06
[SECURITY] [DSA 3503-1] linux security update
2016-03-03 20:56:20
[SECURITY] [DSA 3503-1] linux security update
2016-03-03 20:56:20
osv
osv
linux-2.6 - security update
2016-02-06 00:00:00
linux - security update
2016-03-03 00:00:00
thn
thn
GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users
2023-07-27 13:25:00
suse
suse
Security update for the Linux Kernel (important)
2016-03-16 15:12:30
Security update for the Linux Kernel (important)
2016-04-12 12:09:32
Security update for the Linux Kernel (important)
2016-02-25 21:11:27
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2016-08-26 00:00:00
Unbreakable Enterprise kernel security update
2017-08-23 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON
Related for USN-2909-1
openvas29nessus34ubuntu12cloudfoundry1cve3ubuntucve3debiancve3cvelist3prion3nvd3redhatcve2exploitdb2zdt2debian3osv2thn1suse10oraclelinux2