Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-1894

Опубликовано: 17 июл. 2009
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pulseaudio:pulseaudio:0.9.9:*:*:*:*:*:*:*
cpe:2.3:a:pulseaudio:pulseaudio:0.9.10:*:*:*:*:*:*:*
cpe:2.3:a:pulseaudio:pulseaudio:0.9.14:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00101
Низкий

7.2 High

CVSS2

Дефекты

CWE-362

Связанные уязвимости

ubuntu
больше 16 лет назад

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

redhat
больше 16 лет назад

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

debian
больше 16 лет назад

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local us ...

github
почти 4 года назад

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

EPSS

Процентиль: 28%
0.00101
Низкий

7.2 High

CVSS2

Дефекты

CWE-362