647778 – [TRACKER] local privilege escalation via tmp files

Bug 647778 - [TRACKER] local privilege escalation via tmp files

Summary: [TRACKER] local privilege escalation via tmp files

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:	CVE-2017-18078 CVE-2017-18188
Blocks:
	Show dependency tree

Reported:	2018-02-15 21:19 UTC by Christopher Díaz Riveros (RETIRED)
Modified:	2018-03-25 19:31 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christopher Díaz Riveros (RETIRED) gentoo-dev

2018-02-15 21:19:06 UTC

Local privilege escalation via tmp files.

Refer to bugs 647752 and 646218 for more information

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2018-03-25 19:31:20 UTC

These are all mitigated with fs.protected_hardlinks wrt bug #540006.