CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.

References

Affected packages

Git / github.com/cisofy/lynis

Affected ranges

Type

GIT

Repo

https://github.com/cisofy/lynis

Events

Introduced

Fixed

d012f817ac3e7542956b976066de3db6d3a5a472

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.5.0"
        }
    ]
}

Affected versions

1.*

1.6.1

1.6.2

1.6.3

1.6.4

2.*

2.0.0

2.1.0

2.1.1

2.2.0

2.3.0

2.3.1

2.3.2

2.3.3

2.3.4

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8108.json"