The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for...
nvd · CVSS 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
A Proof of Concept (PoC) exploit for CVE-2015-1328
Automated local privilege escalation exploit for CVE-2015-1328 targeting Ubuntu overlayfs, designed for CTF environments with a simple bash deployment script.
Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes enumeration, exploit compilation, and execution.
Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation
Exploit code for CVE-2015-1328, a Linux kernel privilege escalation vulnerability, enabling local privilege escalation on affected systems.
Proof-of-concept exploit for CVE-2015-1328, a Linux kernel privilege escalation vulnerability, demonstrating local privilege escalation.
Linux Eelvation(持续更新)
compiled CVE-2015-1328
linux-kernel-exploits Linux平台提权漏洞集合
rebel · linux · Jun 16, 2015
rebel · linux · Jun 16, 2015
Metasploit · linux · Nov 2, 2016
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.