2 lines
4.1 KiB
JSON
2 lines
4.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"Linux","platforms":["Linux"],"product":"Ubuntu Kernel","vendor":"Canonical","versions":[{"lessThan":"6.2.0-26.26","status":"unaffected","version":"0","versionType":"semver"},{"lessThan":"6.0.0-1020.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThan":"5.4.0-155.172","status":"unaffected","version":"0","versionType":"semver"}]}],"source":"security@ubuntu.com"},{"affectedData":[{"cpes":["cpe:2.3:o:canonical:ubantu_kernel:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"ubantu_kernel","vendor":"canonical","versions":[{"lessThan":"6.2.0-26.26","status":"affected","version":"0","versionType":"semver"},{"lessThan":"6.0.0-1020.20","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.4.0-155.172","status":"affected","version":"0","versionType":"semver"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*","matchCriteriaId":"B2E702D7-F8C0-49BF-9FFB-883017076E98","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"On Ubuntu kernels carrying both c914c0e27eb0 and \"UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs\", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks."}],"id":"CVE-2023-2640","lastModified":"2026-06-17T05:53:04.680","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@ubuntu.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-10-23T14:57:20.015297Z","version":"2.0.3"}}]},"published":"2023-07-26T02:15:09.300","references":[{"source":"security@ubuntu.com","tags":["Third Party Advisory"],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640"},{"source":"security@ubuntu.com","tags":["Mailing List","Patch"],"url":"https://lists.ubuntu.com/archives/kernel-team/2023-July/140923.html"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6250-1"},{"source":"security@ubuntu.com","tags":["Exploit","Mitigation","Third Party Advisory"],"url":"https://wiz.io/blog/ubuntu-overlayfs-vulnerability"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://lists.ubuntu.com/archives/kernel-team/2023-July/140923.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6250-1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mitigation","Third Party Advisory"],"url":"https://wiz.io/blog/ubuntu-overlayfs-vulnerability"}],"sourceIdentifier":"security@ubuntu.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"security@ubuntu.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-863"}],"source":"nvd@nist.gov","type":"Primary"}]}
|