CVE-2019-11503

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2019-11503 snapd Corrigé dans: 2.40-1

Références

advisory openwall.com
advisory github.com
patch openwall.com
web lists.fedoraproject.org
web lists.fedoraproject.org