Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37cj-9g83-7692

Опубликовано: 22 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

EPSS

Процентиль: 48%
0.00254
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 3 лет назад

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

CVSS3: 4.7
redhat
почти 4 года назад

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

CVSS3: 4.7
nvd
больше 3 лет назад

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

CVSS3: 4.7
debian
больше 3 лет назад

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was ...

EPSS

Процентиль: 48%
0.00254
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-367