Nixpkgs security tracker

Untriaged

Permalink CVE-2023-32629

7.8 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 year, 2 months ago

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip …

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

References

https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L…
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisoryx_transferred
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html x_transferredmailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-descriptionx_transferred
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-trackingx_transferred
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L… x_transferred
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L…
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L…
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisoryx_transferred
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html x_transferredmailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-descriptionx_transferred
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-trackingx_transferred
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L… x_transferred
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L…
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisoryx_transferred
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html x_transferredmailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-descriptionx_transferred
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-trackingx_transferred
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L… x_transferred
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisory
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html mailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-tracking
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L…
https://ubuntu.com/security/notices/USN-6250-1 vendor-advisoryx_transferred
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html x_transferredmailing-list
https://wiz.io/blog/ubuntu-overlayfs-vulnerability technical-descriptionx_transferred
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 issue-trackingx_transferred
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-L… x_transferred

Affected products

Linux

<6.2.0-26.26
<6.0.0-1020.20
<5.4.0-155.172

ubantu_kernel

<6.0.0-1020.20
<.2.0-26.26
<5.4.0-155.172

Matching in nixpkgs

pkgs.m33-linux

Linux program that can communicate with the Micro 3D printer

nixos-unstable 2016-06-23
- nixpkgs-unstable 2016-06-23
- nixos-unstable-small 2016-06-23

pkgs.vibrantlinux

Tool to automate managing your screen's saturation depending on what programs are running

nixos-unstable 2.2.0
- nixpkgs-unstable 2.2.0
- nixos-unstable-small 2.2.0

pkgs.perl538Packages.LinuxFD

Linux specific special filehandles

nixos-unstable 0.014
- nixpkgs-unstable 0.014
- nixos-unstable-small 0.014

pkgs.perl540Packages.LinuxFD

Linux specific special filehandles

nixos-unstable 0.014
- nixpkgs-unstable 0.014
- nixos-unstable-small 0.014

pkgs.perl538Packages.LinuxACL

Perl extension for reading and setting Access Control Lists for files by libacl linux library

nixos-unstable 0.05
- nixpkgs-unstable 0.05
- nixos-unstable-small 0.05

pkgs.perl540Packages.LinuxACL

Perl extension for reading and setting Access Control Lists for files by libacl linux library

nixos-unstable 0.05
- nixpkgs-unstable 0.05
- nixos-unstable-small 0.05

pkgs.perl538Packages.Linuxusermod

This module adds, removes and modify user and group accounts according to the passwd and shadow files syntax

nixos-unstable 0.69
- nixpkgs-unstable 0.69
- nixos-unstable-small 0.69

pkgs.perl540Packages.Linuxusermod

This module adds, removes and modify user and group accounts according to the passwd and shadow files syntax

nixos-unstable 0.69
- nixpkgs-unstable 0.69
- nixos-unstable-small 0.69

pkgs.perl538Packages.LinuxInotify2

Scalable directory/file change notification for Perl on Linux

nixos-unstable Inotify2-2.3
- nixpkgs-unstable Inotify2-2.3
- nixos-unstable-small Inotify2-2.3

pkgs.perl540Packages.LinuxInotify2

Scalable directory/file change notification for Perl on Linux

nixos-unstable Inotify2-2.3
- nixpkgs-unstable Inotify2-2.3
- nixos-unstable-small Inotify2-2.3

pkgs.perl538Packages.LinuxDesktopFiles

Fast parsing of the Linux desktop files

nixos-unstable 0.25
- nixpkgs-unstable 0.25
- nixos-unstable-small 0.25

pkgs.perl538Packages.LinuxDistribution

Perl extension to detect on which Linux distribution we are running

nixos-unstable 0.23
- nixpkgs-unstable 0.23
- nixos-unstable-small 0.23

pkgs.perl540Packages.LinuxDesktopFiles