1. Home
  2. Vulnerabilities
  3. CVE-2018-16597

CVE-2018-16597

CVSS v3.0 5.5 (Medium)
55% Progress
CVSS v2.0 4.9 (Medium)
49% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 4
Advisories 6
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.

Weaknesses
CWE-863
Incorrect Authorization
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2018-09-21 16:29:01
(6 years ago)
Updated Date
2019-10-03 00:03:26
(5 years ago)

Affected Products

Linux

Netapp

Opensuse

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 4.8 version cpe:2.3:o:linux:linux_kernel < 4.8

Configuration #2

    CPE23 From Up To
  Netapp Active Iq Performance Analytics Services cpe:2.3:a:netapp:active_iq_performance_analytics_services:-
  Netapp Element Software cpe:2.3:a:netapp:element_software:-

Configuration #3

    CPE23 From Up To
  Opensuse Leap 42.3 cpe:2.3:o:opensuse:leap:42.3