inotify vulnerabilities

Products

• incron 2
• inotify-tools 1

Latest inotify CVEs

Newest publication first

1. CVE-2009-3589 incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users t...

   Published 2009-10-08

   Medium·CVSS 4.6 EPSS 0.30%

   incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table.

2. CVE-2007-5037 Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.

   Published 2007-09-24

   Medium·CVSS 6.8 EPSS 3.0%

   Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.

3. CVE-2007-0636 Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files."

   Published 2007-01-31

   Low·CVSS 2.1 EPSS 0.35%

   Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.