Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-18240

Опубликовано: 19 мар. 2018
Источник: debian
EPSS Низкий

Описание

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
collectdnot-affectedpackage

EPSS

Процентиль: 12%
0.0004
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

CVSS3: 5.5
nvd
почти 8 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

CVSS3: 5.5
github
больше 3 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

EPSS

Процентиль: 12%
0.0004
Низкий