CVEPublished 2021-04-171 article on news6 live referencesNVD data

CVE-2021-3493

Vulnerability data via CVEDB (Shodan)

CISA KEVKnown exploited in the wild.
CISA action: The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
CVSS v3.1
8.8
HIGH
EPSS percentile
99
Exploit Prediction Scoring System · top 1% of all CVEs
Description

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.

Timeline
Published 2021-04-17

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (8)