CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

The CVE affects seatd-launch in seatd 0.6.x before 0.6.2, where privilege escalation is possible because seatd-launch uses execlp and may be installed setuid root. The root cause is execlp honoring PATH, enabling a caller to influence which executable is loaded. Impact is privilege escalation to ...