Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-11747
HistoryJul 30, 2017 - 4:29 p.m.

Command injection

2017-07-3016:29:00
PRIOn knowledge base
www.prio-n.com
1

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a “kill cat /run/tinyproxy/tinyproxy.pid” command.

CPENameOperatorVersion
tinyproxyle1.8.4

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%