CVE-2009-0035

2019-11-0902:02:21

redhat

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

CNA Affected

[
  {
    "product": "alsa-driver",
    "vendor": "alsa-driver",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.19 and later"
      }
    ]
  }
]