CVE-2015-8660

CVE 2015-8660 研究 描述 这是我为操作系统安全课程期末研究项目所做的关于 CVE 2015-8660 overlayFS 漏洞的研究。该项目旨在寻找 2012-2022 年间的 Linux 内核漏洞，解释该漏洞及其潜在影响，并通过精心构造的利用代码演示该漏洞。此漏洞由位于 fs/overlayfs/inode.c 程序中的 ovlsetattr 函数引发。当通过恶意构造的应用程序利用时，恶意用户能够获取本地计算机的特权访问权限。该漏洞影响 Linux 内核版本直至 4.3.3。包括我的项目研究论文以及使用 Exploit-db 上找到的利用代码（如下所述）进行演示的视频。...

Authorization Bypass

Linux kernel is vulnerable to authorization bypass. The ovlsetattr function in fs/overlayfs/inode.c attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1020)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctpaccept during the processing of heartbeat timeout...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Design/Logic Flaw

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

CVE-2015-8660

CVE-2015-8660 targets the ovl_setattr path in Linux overlayfs (fs/overlayfs/inode.c) up to kernel 4.3.3. The issue arises from attempting to merge distinct setattr operations, allowing local users to bypass access restrictions and modify attributes of arbitrary overlay files via a crafted applica...

CVE-2015-8660

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

UBUNTU-CVE-2015-8660

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

CVE-2015-8660

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...