CyberRota Analysis
AI-GeneratedThe vulnerability in fuse-overlayfs affects the handling of SUID and SGID mode bits in rootless containers, potentially allowing low-privileged processes to set the upper-layer file's permissions to 4777. This could lead to privilege escalation, enabling unauthorized users to execute files with elevated privileges. Users and administrators of systems utilizing fuse-overlayfs versions prior to 1.17 should prioritize upgrading to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.