Security Advisory

CVE-2017-18018

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-04 04:00:00

Last updated 2025-06-09 15:57:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.

← Browse all CVEs View on cve.org ↗