CentOS 9 : attr-2.6.0-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the attr-2.6.0-2.el9 build changelog. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...

[SECURITY] Fedora 43 Update: attr-2.6.0-1.fc43

A set of tools for manipulating extended attributes on filesystem objects, in particular getfattr1 and setfattr1. An attr1 command is also provided which is largely compatible with the SGI IRIX tool of the same name...

[SECURITY] Fedora 44 Update: attr-2.6.0-1.fc44

A set of tools for manipulating extended attributes on filesystem objects, in particular getfattr1 and setfattr1. An attr1 command is also provided which is largely compatible with the SGI IRIX tool of the same name...

OESA-2026-2916 attr security update

A set of tools for manipulating extended attributes on file system objects, in particular getfattr1 and setfattr1. An attr1 command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fixes: attr before version 2.6.0 contains a symlink traversal...

OESA-2026-2915 attr security update

A set of tools for manipulating extended attributes on file system objects, in particular getfattr1 and setfattr1. An attr1 command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fixes: attr before version 2.6.0 contains a symlink traversal...

OESA-2026-2914 attr security update

A set of tools for manipulating extended attributes on file system objects, in particular getfattr1 and setfattr1. An attr1 command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fixes: attr before version 2.6.0 contains a symlink traversal...

OESA-2026-2913 attr security update

A set of tools for manipulating extended attributes on file system objects, in particular getfattr1 and setfattr1. An attr1 command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fixes: attr before version 2.6.0 contains a symlink traversal...

attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

...

Linux Distros Unpatched Vulnerability : CVE-2026-54371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges b...

Symlink Attack

Overview libattr is a None Affected versions of this package are vulnerable to Symlink Attack. via the getfattr or setfattr process. An attacker can gain elevated privileges by substituting a symbolic link for a pathname component during directory traversal, causing operations to be redirected to...

CVE-2026-54371

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

UBUNTU-CVE-2026-54371

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

CVE-2026-54371

The CVE affects the attr utilities (getfattr/setfattr) with versions before 2.6.0. Root cause is a symlink traversal during directory hierarchy traversal, enabling local privilege escalation when a privileged process uses getfattr/setfattr on attacker-controlled paths. The documents do not provid...

EUVD-2026-40087

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

CVE-2026-54371

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

CVE-2026-54371

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component ca...

PT-2026-53274

Name of the Vulnerable Software and Affected Versions attr versions prior to 2.6.0 Description A flaw in the attr component, specifically within the getfattr and setfattr utilities, allows a local attacker to perform a symlink traversal attack. By replacing a pathname component with a symbolic li...