CVE-2018-16597 — Incorrect Authorization in Kernel

CWE-863 — Incorrect AuthorizationCWE-862 — Missing Authorization7 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 74.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelDebian LinuxOpensuse Leap
Timeline
PublishedSep 21
Latest updateMay 13

Description

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶Debianlinux/linux_kernel< 4.8.5-1+3
▶debiandebian/linux< linux 4.8.5-1 (bookworm)
▶NVDopensuse/leap42.3

Patches

Patch: bugzilla.suse.com ↗Patch: git.kernel.org ↗Patch: security.netapp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8j89-mf7f-m8q3: An issue was discovered in the Linux kernel before 4↗2022-05-13
▶
OSV
CVE-2018-16597: An issue was discovered in the Linux kernel before 4↗2018-09-21
▶

📋Vendor Advisories

2
Red Hat
kernel: overlayfs file truncation without permissions↗2018-09-18
▶
Debian
CVE-2018-16597: linux - An issue was discovered in the Linux kernel before 4.8. Incorrect access checkin...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-16597 kernel: overlayfs file truncation without permissions↗2018-09-24
▶
Bugzilla
CVE-2018-16597 kernel: overlayfs file truncation without permissions [fedora-all]↗2018-09-24
▶