{"api_version":"1","generated_at":"2026-07-23T11:30:08+00:00","cve":"CVE-2018-6559","urls":{"html":"https://cve.report/CVE-2018-6559","api":"https://cve.report/api/cve/CVE-2018-6559.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-6559","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-6559"},"summary":{"title":"CVE-2018-6559","description":"The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.","state":"PUBLIC","assigner":"security@ubuntu.com","published_at":"2018-10-26 17:29:00","updated_at":"2019-10-09 23:41:00"},"problem_types":["CWE-200"],"metrics":[],"references":[{"url":"http://www.securityfocus.com/bid/105752","name":"105752","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"Linux Kernel CVE-2018-6559 Local Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://usn.ubuntu.com/3832-1/","name":"USN-3832-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"USN-3832-1: Linux kernel (AWS) vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html","name":"https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"[PATCH 0/1][B] CVE-2018-6559 - Filename information disclosure in overlayfs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/3835-1/","name":"USN-3835-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"USN-3835-1: Linux kernel vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html","name":"https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"CVE-2018-6559 in Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://launchpad.net/bugs/1793458","name":"https://launchpad.net/bugs/1793458","refsource":"CONFIRM","tags":["Exploit","Issue Tracking","Third Party Advisory"],"title":"Bug #1793458 “Overlayfs in user namespace leaks directory conten...” : Bugs : linux package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/3836-1/","name":"USN-3836-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"USN-3836-1: Linux kernel vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/3836-2/","name":"USN-3836-2","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"USN-3836-2: Linux kernel (HWE) vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/3833-1/","name":"USN-3833-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"USN-3833-1: Linux kernel (AWS) vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6559","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6559","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"LEGACY","value":"Philipp Wendler","lang":""}],"nvd_cpes":[{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"16.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"18.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"18.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"16.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"18.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"18.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6559","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security@ubuntu.com","DATE_PUBLIC":"2018-10-18T00:00:00.000Z","ID":"CVE-2018-6559","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10","version":{"version_data":[{"affected":"=","version_value":"4.15.0-38.41"},{"affected":"=","version_value":"4.18.0-10.11"}]}}]},"vendor_name":"Canonical Ltd."}]}},"credit":[{"lang":"eng","value":"Philipp Wendler"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-200: Information Exposure"}]}]},"references":{"reference_data":[{"name":"105752","refsource":"BID","url":"http://www.securityfocus.com/bid/105752"},{"name":"USN-3836-2","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3836-2/"},{"name":"USN-3835-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3835-1/"},{"name":"https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html","refsource":"CONFIRM","url":"https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html"},{"name":"https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html","refsource":"CONFIRM","url":"https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html"},{"name":"USN-3833-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3833-1/"},{"name":"USN-3832-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3832-1/"},{"name":"https://launchpad.net/bugs/1793458","refsource":"CONFIRM","url":"https://launchpad.net/bugs/1793458"},{"name":"USN-3836-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/3836-1/"}]},"source":{"discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2018-10-26 17:29:00","lastModifiedDate":"2019-10-09 23:41:00","problem_types":["CWE-200"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW"},"exploitabilityScore":1.8,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"severity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"6559","Ordinal":"122687","Title":"CVE-2018-6559","CVE":"CVE-2018-6559","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"6559","Ordinal":"1","NoteData":"The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"6559","Ordinal":"2","NoteData":"2018-10-26","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"6559","Ordinal":"3","NoteData":"2018-12-04","Type":"Other","Title":"Modified"}]}}}