CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-34937.8/HIGHEPSS 49.2%CISA KEV
2021-04-17

Ubuntu Linux Kernel OverlayFS Local Privilege Escalation Vulnerability (CVE-2021-3493) Analysis and Mitigation Guide

[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled

[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host

[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse