CVE-2017-18018: In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file

Security Advisory ID : BSA-2022-2073

Component : GNU Coreutils

Revision : 1.0

**

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX “-R -L” options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.

Affected Products

• All versions of Brocade Fabric OS before v9.1.0

Products under investigation

• Brocade Active Support Connectivity Gateway (ASC-G)