CVE-2023-32629

Katalog CVE

CVSS 7.8 · High EPSS 9,1%

Kerentanan Incorrect Authorization pada canonical ubuntu linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Rincian

Terbit di NVD

26 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

9,1% peluang dieksploitasi; lebih tinggi dari 95,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ubuntu.com/security/notices/USN-6250-1 advisory vendor
• https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing list · patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 advisory pihak ketiga
• https://wiz.io/blog/ubuntu-overlayfs-vulnerability exploit
• http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html