iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "iproute",
"binary_version": "1:3.12.0-2"
},
{
"binary_name": "iproute-doc",
"binary_version": "1:3.12.0-2"
},
{
"binary_name": "iproute2",
"binary_version": "3.12.0-2"
},
{
"binary_name": "iproute2-doc",
"binary_version": "3.12.0-2"
}
]
}