CVE-2017-14484

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

Score

CVSS 3.0 7.3 High

Status

Modified - cve@mitre.org

Published

2017-09-15

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Sci-mathematics-gimps (Gentoo)

References

• https://bugs.gentoo.org/show_bug.cgi?id=603408