CVE-2017-14484 The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an...
HighCVSS 7.3
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo sci-mathematics-gimps | = 28.10 | No fix listed |
References
- bugs.gentoo.org issue-tracking patch third-party-advisory