CVE-2015-1328
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
72Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 38%
da publicação à armano mesmo dia
Publicada no NVD28 de nov.
1ª PoC16 de jun.
metasploit16 de jun.
VulnCheck+1725d
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 24✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40688exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/37292exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/37293githubgithub.com/elit3pwner/CVE-2015-1328-GoldenEye★ 10githubgithub.com/0xf1d0/CVE-2015-1328★ 1githubgithub.com/saqibnet/blackbox-pentesting-infsecos★ 0githubgithub.com/SR7-HACKING/LINUX-VULNERABILITY-CVE-2015-1328★ 0githubgithub.com/BlackFrog-hub/cve-2015-1328★ 0githubgithub.com/notlikethis/CVE-2015-1328★ 0githubgithub.com/thieveshkar/RootQuest-CTF-Box-Multi-Stage-Exploitation-VM★ 0githubgithub.com/saqib-butt2/blackbox-pentesting-infsecos★ 0githubgithub.com/WhatsWrongAndWhy/CVE-2015-1328★ 0githubgithub.com/FernandoCassioDev/CVE-2015-1328★ 0githubgithub.com/bansalkrish007-arch/cve-2015-1328★ 0githubgithub.com/YastrebX/CVE-2015-1328★ 0vulncheckvulncheck.com/xdb/1ba9894bb327não verificadovulncheckvulncheck.com/xdb/121c8904341cnão verificadovulncheckvulncheck.com/xdb/605bf09b5857não verificadovulncheckvulncheck.com/xdb/1fd29603ac40não verificadocve_referencewww.exploit-db.com/exploits/37292/não verificadocve_referencewww.exploit-db.com/exploits/40688/não verificadovulncheckvulncheck.com/xdb/d054da419d7anão verificadovulncheckvulncheck.com/xdb/f6077e67f44enão verificadovulncheckvulncheck.com/xdb/1a7d6e27e1canão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://seclists.org/oss-sec/2015/q2/717https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.htmlhttps://security-tracker.debian.org/tracker/CVE-2015-1328https://www.exploit-db.com/exploits/37292/http://www.exploit-db.com/exploits/40688/http://www.securityfocus.com/bid/75206