CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-03867.8/HIGHEPSS 7.9%CISA KEV
2023-03-22

Linux Kernel OverlayFS Local Privilege Escalation Vulnerability (CVE-2023-0386) Analysis and Mitigation Guide

[Affected Scope] Systems and container environments utilizing the Linux kernel OverlayFS subsystem

[Impact] A local attacker can escalate privileges to root by copying a setuid/capable file from a nosuid mount into another mount

[Mitigation] Apply the latest kernel security patches from your distribution or restrict unprivileged user namespaces as a temporary workaround

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse