CVE-2018-21269

2020-10-2704:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.0004 Low

EPSS

Percentile

5.2%

JSON

checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.

OSVersionArchitecturePackageVersionFilename
Alpine3.10-mainnoarchopenrc< 0.41.2-r2UNKNOWN
Alpine3.11-mainnoarchopenrc< 0.42.1-r3UNKNOWN
Alpine3.12-mainnoarchopenrc< 0.42.1-r12UNKNOWN
Alpine3.13-mainnoarchopenrc< 0.42.1-r20UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.10-main	noarch	openrc	< 0.41.2-r2	UNKNOWN
Alpine	3.11-main	noarch	openrc	< 0.42.1-r3	UNKNOWN
Alpine	3.12-main	noarch	openrc	< 0.42.1-r12	UNKNOWN
Alpine	3.13-main	noarch	openrc	< 0.42.1-r20	UNKNOWN

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for ALPINE:CVE-2018-21269