CVE-2017-15945 | BDVDB-2026-92368 Detail

Description#

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.gentoo.org/630822
https://security.gentoo.org/glsa/201711-04

Exploit#

No public exploit known

History#

Version 12017-10-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.