CVE-2012-0055

Katalog CVE

CVSS 7.8 · High EPSS 1,2%

Kerentanan Missing Authorization pada linux kernel, canonical ubuntu linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.

Rincian

Terbit di NVD

19 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2012/01/17/11 exploit · mailing list · patch · advisory pihak ketiga
• http://www.ubuntu.com/usn/USN-1363-1 advisory pihak ketiga
• http://www.ubuntu.com/usn/USN-1364-1 advisory pihak ketiga
• http://www.ubuntu.com/usn/USN-1384-1 advisory pihak ketiga
• https://access.redhat.com/security/cve/cve-2012-0055 advisory pihak ketiga
• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941 exploit · advisory pihak ketiga
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055 issue tracking · advisory pihak ketiga