Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33j2-jqmj-8hx4

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

EPSS

Процентиль: 8%
0.0003
Низкий

7.3 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 7.3
nvd
больше 8 лет назад

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

EPSS

Процентиль: 8%
0.0003
Низкий

7.3 High

CVSS3

Дефекты

CWE-269