CVE-2015-1328 – overlayfs privilege escalation

High

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 14.04 LTS with 3.16 kernel

Description

Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.

Affected Products and Versions

_Severity is high unless otherwise noted.
_

• Any Cloud Foundry deployment with Ubuntu Trusty BOSH stemcell prior to version 2989

Mitigation

Users of affected versions should apply the following mitigation:

• The Cloud Foundry project recommends upgrading to BOSH 2989 stemcell or later for all Cloud Foundry deployments.

Credit

Philip Pettersson

References

• <http://www.ubuntu.com/usn/usn-2646-1/&gt;
• <https://bosh.io/stemcells&gt;
• <https://github.com/cloudfoundry/cf-release&gt;