Описание
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | |
| devel | not-affected | 2.36.1-6ubuntu1 |
| esm-infra-legacy/trusty | ignored | |
| esm-infra/bionic | ignored | |
| esm-infra/focal | ignored | |
| esm-infra/xenial | ignored | |
| focal | ignored | |
| groovy | ignored | end of life |
| hirsute | not-affected | 2.36.1-6ubuntu1 |
| impish | not-affected | 2.36.1-6ubuntu1 |
Показывать по
Ссылки на источники
EPSS
3.3 Low
CVSS2
6.3 Medium
CVSS3
Связанные уязвимости
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
There is an open race window when writing output in the following util ...
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
EPSS
3.3 Low
CVSS2
6.3 Medium
CVSS3