CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.

References

Affected packages

Git / github.com/cisofy/lynis

Affected ranges

Type: GIT
Repo: https://github.com/cisofy/lynis
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

d012f817ac3e7542956b976066de3db6d3a5a472

Affected versions

1.*

1.6.1

1.6.2

1.6.3

1.6.4

2.*

2.0.0

2.1.0

2.1.1

2.2.0

2.3.0

2.3.1

2.3.2

2.3.3

2.3.4

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8108.json"