CVE-2012-0055

Published: Feb 19, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.

Affected (3)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.0.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.10

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (14)

http://www.openwall.com/lists/oss-security/2012/01/17/11

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

http://www.ubuntu.com/usn/USN-1363-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1364-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-1384-1

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/cve/cve-2012-0055

Source: secalert@redhat.com

Third Party Advisory

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941

Source: secalert@redhat.com

ExploitThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/01/17/11