Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-18188

Опубликовано: 14 фев. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openr:opentmpfiles:*:*:*:*:*:*:*:*
Версия до 0.1.3 (включая)

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.

CVSS3: 5.5
debian
почти 8 лет назад

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sys ...

CVSS3: 5.5
github
больше 3 лет назад

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-59