Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wp7-vqr4-g72h

Опубликовано: 22 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

EPSS

Процентиль: 38%
0.00163
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 5.2
ubuntu
почти 7 лет назад

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

CVSS3: 5.2
nvd
почти 7 лет назад

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.

EPSS

Процентиль: 38%
0.00163
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-693