Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-9430

Опубликовано: 14 нояб. 2024
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2024-9430: nano security update (LOW)

[5.6.1-6]

  • fix emergency file replacement vulnerability (RHEL-35237)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

nano

5.6.1-6.el9

Oracle Linux x86_64

nano

5.6.1-6.el9

Связанные CVE

Связанные уязвимости

CVSS3: 6.7
ubuntu
около 1 года назад

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

CVSS3: 6.7
redhat
около 1 года назад

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

CVSS3: 6.7
nvd
около 1 года назад

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

CVSS3: 6.7
msrc
7 месяцев назад

Описание отсутствует

CVSS3: 6.7
debian
около 1 года назад

A vulnerability was found in GNU Nano that allows a possible privilege ...