medium5.5
CVE-2018-21269
checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.
Impact
checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openrc Project | Openrc | through 0.42.1 |