Описание
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
EPSS
4.7 Medium
CVSS3
7.1 High
CVSS3
1.9 Low
CVSS2
Дефекты
Связанные уязвимости
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does no ...
ALT-PU-2018-2970: package `coreutils` update to version 8.30.0.31.69df9-alt1
EPSS
4.7 Medium
CVSS3
7.1 High
CVSS3
1.9 Low
CVSS2