ZDI-23-1009: Canonical Ubuntu OverlayFS File System Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1009?
The severity of ZDI-23-1009 is classified as high due to the potential for privilege escalation.
How do I fix ZDI-23-1009?
To fix ZDI-23-1009, update your Ubuntu installation to the latest version that addresses this vulnerability.
Who is affected by ZDI-23-1009?
ZDI-23-1009 affects installations of Canonical Ubuntu that use the libdevmapper1.02.1 package.
Can ZDI-23-1009 be exploited remotely?
No, ZDI-23-1009 requires local access to execute low-privileged code before privilege escalation is possible.
What are the prerequisites for exploiting ZDI-23-1009?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-23-1009.