CVE-2021-3493

Summary

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.

Sources

• CVE-2021-3493PoC

  Two-stage proof-of-concept for CVE-2021-3493, exploiting Ubuntu OverlayFS to escalate from unprivileged user to root via file capability manipulation in user namespaces.

• CVE-2021-3493Exploit

  Local privilege escalation exploit for Ubuntu OverlayFS flaw CVE-2021-3493; compiles with gcc and runs to gain elevated privileges on affected Ubuntu versions.

• CVE-2021-3493Exploit

  Ubuntu OverlayFS Local Privesc

• CVE-2021-3493Exploit

  Local privilege escalation exploit for Ubuntu OverlayFS vulnerability (CVE-2021-3493). Compile and run to gain elevated privileges on affected kernels.

• DeepRootExploit

  CVE-2021-3493 OverlayFS privilege escalation exploit framework with advanced red team features. Includes persistence mechanisms, post-exploitation modules, stealth capabilities, and comprehensive documentation. For authorized testing only.

• CVE-2021-3493Exploit

  C exploit for Ubuntu OverlayFS local privilege escalation (CVE-2021-3493) targeting unpatched kernels 5.11 and earlier across multiple Ubuntu releases.

• CVE-2021-3493Exploit

  Local privilege escalation exploit for Ubuntu OverlayFS vulnerability (CVE-2021-3493). Compile and run to gain elevated privileges on affected Ubuntu kernels.

• CVE-2021-3493-ExploitExploit

  C-based local privilege escalation exploit for CVE-2021-3493, targeting OverlayFS in Linux kernels prior to 5.11. Provides compilation and usage instructions for authorized security testing.

• OverlayFS---CVE-2021-3493Research

  Technical analysis of CVE-2021-3493, an Ubuntu OverlayFS local privilege escalation vulnerability, including root cause explanation and affected versions.

• overlayFS-CVE-2021-3493PoC

  2021 kernel vulnerability in Ubuntu.

• OverlayFS-CVE-2021-3493Exploit

  C exploit for CVE-2021-3493 targeting OverlayFS to escalate privileges to root on vulnerable Linux systems.

• OverlayFS---CVE-2021-3493Exploit

  C-based exploit for CVE-2021-3493, a local privilege escalation vulnerability in the Linux kernel's OverlayFS filesystem, enabling unprivileged users to gain root access.

• CVE-2021-3493PoC

  C exploit for CVE-2021-3493, a local privilege escalation vulnerability in Ubuntu's overlayfs. Provides proof-of-concept code to gain root access on affected systems.

• OverlayFS-CVE-2021-3493Exploit

  Exploit a 2021 Kernel vulnerability in Ubuntu to become root almost instantly!

• CVE-2021-3493_CVE-2022-3357Exploit

  Research repository with source code and documentation for CVE-2021-3493 (privilege escalation) and CVE-2022-3357 (RCE), demonstrating combined exploitation against WordPress servers on Ubuntu with OverlayFS.

• OverlayFS-LPE-ExploitExploit

  Type Local Privilege Escalation exploit for CVE-2021-3493(Ubuntu Kernel vulnerability) documrnted during TryHackme Lab

• OverlayFS-CVE-2021-3493Exploit

  Exploit For OverlayFS

• CVE-2021-3493Exploit

  Linux kernel local privilege escalation exploit for CVE-2021-3493, enabling unprivileged users to gain root access on affected systems.