8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
49.7%
libpmix.so is vulnerable to Race Conditions. A remote attacker is able to obtain ownership of arbitrary files due to a race conditions when executing the library with a UID
of 0
.
CPE | Name | Operator | Version |
---|---|---|---|
libpmix.so | le | 2.3.0 | |
libpmix.so | le | 2.3.0 |
bugzilla.suse.com/show_bug.cgi?id=1215190
docs.openpmix.org/en/latest/security.html
github.com/advisories/GHSA-m8fg-c37h-w29q
github.com/openpmix/openpmix/commit/da036933c2795c1f40d0835e15f17e204e4daf0f
github.com/openpmix/openpmix/pull/3150
github.com/openpmix/openpmix/releases/tag/v4.2.6
github.com/openpmix/openpmix/releases/tag/v5.0.1
lists.debian.org/debian-lts-announce/2023/10/msg00048.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/
lists.fedoraproject.org/archives/list/[email protected]/message/IFKIY6SNC3KQNZMVROWMIW6DI5XPNKQX/
lists.fedoraproject.org/archives/list/[email protected]/message/SYJ7IRNR6NHJMTNOV3E3W3D5MLDRDCJX/
lists.fedoraproject.org/archives/list/[email protected]/message/YDLWSMQYXF2ZGOQKCG26H6ZZA5FEH7HX/
www.debian.org/security/2023/dsa-5547