CVE-2017-18188

2022-10-0316:23:16

mitre

www.cve.org

openrc

opentmpfiles

vulnerability

local users

ownership

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which “chown -R” will be run.

References

github.com/OpenRC/opentmpfiles/issues/3