debian/logcheck vulnerabilities

Latest debian/logcheck CVEs

Newest publication first

1. CVE-2017-20148 In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls.

   Published 2022-09-20

   Critical·CVSS 9.8 EPSS 1.1%

   In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls.

2. CVE-2004-0404 logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.

   Published 2004-04-20

   Low·CVSS 1.2 EPSS 0.31%

   logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.

3. DSA-488 logcheck - insecure temporary directory

   Published 2004-04-16

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.