Maple Labs

CVE search · CVE-2017-14484

CVE-2017-14484

high 7.3

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-269

Severity

VersionScoreVectorSource
CVSS 3.0 high 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H nvd@nist.govPrimary
CVSS 2.0 medium 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • gentoo · sci-mathematics-gimps

References