CVE-2017-18925

CVE-2017-18925 affects opentmpfiles up to version 0.3.1. The vulnerability arises from mishandled d entries that enable a symlink attack, allowing a local attacker to replace or gain ownership of arbitrary files. Impact is local privilege escalation with potential integrity impact on targeted fil...

CVE-2017-18188

CVE-2017-18188 affects OpenRC opentmpfiles up to version 0.1.3. When the fs.protected_hardlinks sysctl is disabled, local users can cause a file ownership change by creating a hard link inside a directory that will later be processed by a recursive chown -R. The root cause is the interaction betw...