Exploitation Summary
EIP tracks 7 public exploits for CVE-2015-8660.
PoCs published by Metasploit, rebel, halfdog, including Metasploit module exploits/linux/local/overlayfs_priv_esc.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-1328 and CVE-2015-8660, both related to overlayfs privilege escalation vulnerabilities in specific Ubuntu kernel versions. It checks for vulnerable kernels, compiles or drops an exploit binary, and executes it to gain elevated privileges.
Description
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
Exploits (7)
This Metasploit module exploits CVE-2015-1328 and CVE-2015-8660, both related to overlayfs privilege escalation vulnerabilities in specific Ubuntu kernel versions. It checks for vulnerable kernels, compiles or drops an exploit binary, and executes it to gain elevated privileges.
This exploit leverages a vulnerability in overlayfs (CVE-2015-8660) to gain root privileges by manipulating mount namespaces and file permissions. It creates a suid bash binary in a controlled directory structure, then executes it to escalate privileges.
This exploit leverages a user namespace and overlayfs mount to escalate privileges by modifying the setuid binary `/bin/su`. It demonstrates a local privilege escalation (LPE) vulnerability in the Linux kernel's handling of overlayfs within user namespaces.
This repository contains functional exploit code for CVE-2015-8660, a vulnerability in the Linux kernel's overlayfs module. The code includes vulnerable and patched versions of the affected functions, demonstrating the exploit mechanism.
This is a functional local privilege escalation exploit for CVE-2015-8660, targeting a vulnerability in the Linux kernel's overlayfs implementation. It leverages namespace manipulation and mount operations to gain root privileges by setting the SUID bit on /bin/bash.
This repository contains research on CVE-2015-8660, an overlayFS vulnerability in the Linux kernel caused by the ovl_setattr function. It includes a research paper and references to exploit code but does not contain functional exploit code itself.
This Metasploit module exploits CVE-2015-8660 and CVE-2015-1328, both related to privilege escalation via overlayfs in Linux kernels. It checks for vulnerable kernel versions and compiles/executes exploit code to gain root access.
References (23)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H