CVE-2017-14730

The vulnerability CVE-2017-14730 affects the Gentoo package Gentoo app-admin/logstash-bin (versions before 5.5.3 and 5.6.x before 5.6.1). The root cause is in the init script, which performs recursive chown -R on user-writable directory trees. This enables a local attacker to exploit access to a ...