VDE: Privilege escalation

Background VDE is an ethernet compliant virtual network that can be spawned over a set of physical computer over the Internet. Description It was discovered that Gentoo’s default VDE installation suffered from a privilege escalation vulnerability in the init script. This script calls an unsafe...

Gentoo net-misc/vde elevation of privilege vulnerability

The Gentoo net-misc/vde package is a set of distributed virtual networking frameworks from the Gentoo Foundation. A security vulnerability exists in versions of the Gentoo net-misc/vde package prior to 2.3.2-r4. An attacker can exploit this vulnerability to gain root privileges by creating hard...

CVE-2017-16638

The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by creating a hard link in a directory on which "chown" is called recursively by the OpenRC service script...