1. Home
  2. Vulnerabilities
  3. CVE-2016-10318

CVE-2016-10318

CVSS v3.0 6.5 (Medium)
65% Progress
CVSS v2.0 4 (Medium)
40% Progress
EPSS 0.18 % (56th)
0.18% Progress
Affected Products 1
Advisories 1
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allows a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of service.

Weaknesses
CWE-264
Permissions, Privileges, and Access Controls
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2017-04-04 16:59:00
(7 years ago)
Updated Date
2017-04-11 15:32:38
(7 years ago)

Affected Products

Linux

Configuration #1

    CPE23 From Up To
  Linux Kernel 4.7.3 and prior versions cpe:2.3:o:linux:linux_kernel <= 4.7.3