Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-588v-mxh5-4p2f

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

EPSS

Процентиль: 12%
0.0004
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

CVSS3: 5.5
nvd
почти 8 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

CVSS3: 5.5
debian
почти 8 лет назад

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownersh ...

EPSS

Процентиль: 12%
0.0004
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20