Skip to content

CVE-2017-18925 opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack.

MediumCVSS 5.5 EPSS 0.38%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack.

Affected products

ProductAffected versionsFixed in
openr opentmpfiles <= 0.3.1 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory