ID:10053 - Exploit for Missing authorization in Linux kernel - CVE-2012-0055

 
Main Vulnerability Database Exploits ID:10053 - Exploit for Missing authorization in Linux kernel - CVE-2012-0055

ID:10053 - Exploit for Missing authorization in Linux kernel - CVE-2012-0055

Published: June 20, 2024


Vulnerability identifier: #VU92771
Vulnerability risk: Low
CVE-ID: CVE-2012-0055
CWE-ID: CWE-862
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.


Remediation

Install update from vendor's repository.