ZDI-CAN-20913: ZDI-23-1009: Canonical Ubuntu OverlayFS File System Missing Authorization Local Privilege Escalation Vulnerability

Published Jul 28, 2023

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Software

1 affected component

Canonical Ubuntu

Event History

Jul 28, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-20913?

ZDI-CAN-20913 has been classified as a privilege escalation vulnerability.

How do I fix ZDI-CAN-20913?

To fix ZDI-CAN-20913, update the affected Ubuntu system to the latest version that addresses this vulnerability.

What platforms are affected by ZDI-CAN-20913?

ZDI-CAN-20913 affects installations of Canonical Ubuntu that use specific versions of libdevmapper.

Can local users exploit ZDI-CAN-20913?

Yes, local users with low-level privileges can exploit ZDI-CAN-20913 if they have the ability to execute code on the system.

Who should be concerned about ZDI-CAN-20913?

System administrators and users of affected versions of Canonical Ubuntu should be concerned about ZDI-CAN-20913 and take appropriate actions.