CVE-2012-5630

2019-11-2513:54:40

redhat

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

JSON

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

CNA Affected

[
  {
    "product": "libuser",
    "vendor": "libuser",
    "versions": [
      {
        "status": "affected",
        "version": "0.57"
      },
      {
        "status": "affected",
        "version": "0.56"
      }
    ]
  }
]

References

lists.fedoraproject.org/pipermail/package-announce/2013-April/102068.html

access.redhat.com/security/cve/cve-2012-5630

bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5630

security-tracker.debian.org/tracker/CVE-2012-5630

www.securityfocus.com/bid/59285