Lucene search
+L

428 matches found

Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.15 views

Duplicate Advisory: uutils coreutils has an Incorrect Check of Function Return Value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2x2h-fw32-rq7v. This link is maintained to preserve external references. Original Description A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit...

5.5CVSS5.9AI score0.00142EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.13 views

GHSA-88CH-Q68X-36V7 Duplicate Advisory: uutils coreutils has an Incorrect Check of Function Return Value

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2x2h-fw32-rq7v. This link is maintained to preserve external references. Original Description A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit...

5.5CVSS5.9AI score0.00142EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/22 5:16 p.m.12 views

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS0.00142EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/04/22 5:16 p.m.24 views

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/22 5:16 p.m.10 views

UBUNTU-CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/22 4:08 p.m.37 views

CVE-2026-35350

The CVE-2026-35350 entry concerns the cp utility in uutils coreutils. When using -p (preserve), if chown fails, the tool applies the source’s mode bits, potentially producing a user-owned copy with privileged bits (setuid/setgid) and violating local security policies. This behavior differs from G...

6.6CVSS5.7AI score0.00125EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/22 4:07 p.m.7 views

CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.7AI score0.00142EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/22 4:07 p.m.11 views

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.7AI score0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/22 4:07 p.m.15 views

CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/22 4:07 p.m.34 views

CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS0.00142EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/22 4:07 p.m.9 views

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.4AI score0.00142EPSS
SaveExploits0
CVE
CVE
added 2026/04/22 4:07 p.m.26 views

CVE-2026-35340

The CVE-2026-35340 issue affects the uutils coreutils chown and chgrp via the ChownExecutor. In recursive operations, the utilities return an exit code based solely on the last processed file; if earlier ownership/group changes failed due to permissions, they may still report success (0). This ca...

5.5CVSS5.7AI score0.00142EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.12 views

PT-2026-34476

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.7AI score0.00142EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-35340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The fina...

5.5CVSS5.4AI score0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/06 7:58 a.m.20 views

BIT-NODE-MIN-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS6AI score0.00149EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/30 9:31 p.m.17 views

EUVD-2026-17180

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS6.7AI score0.00395EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/30 8:16 p.m.10 views

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/30 8:16 p.m.12 views

UBUNTU-CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS7AI score0.00149EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/30 7:07 p.m.49 views

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/30 7:07 p.m.6 views

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS6.7AI score0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder