Описание
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libcgroup | fixed | 0.41-8.1 | package | |
| libcgroup | fixed | 0.41-8+deb9u1 | stretch | package |
Примечания
https://sourceforge.net/p/libcg/libcg/ci/0d88b73d189ea3440ccaab00418d6469f76fa590/
cgred not enabled by default, shipped example config logs to syslog by default
Связанные уязвимости
CVSS3: 8.1
ubuntu
больше 7 лет назад
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
CVSS3: 4.4
redhat
больше 7 лет назад
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
CVSS3: 8.1
nvd
больше 7 лет назад
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
