CVE-2017-18188 | BDVDB-2026-96442 Detail

Description#

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/OpenRC/opentmpfiles/issues/3

Exploit#

No public exploit known

History#

Version 12018-02-14Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.