PT-2019-6797 · Libuser · Libuser

·

CVE-2012-5630

·

تاريخ النشر

2019-11-25

·

تاريخ التحديث

2019-12-04

CVSS v3.1

6.3

متوسطة

المتجهAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions libuser versions 0.56 through 0.57
Description The issue is related to a TOCTOU (time-of-check time-of-use) race condition that occurs when copying and removing directory trees.
Recommendations For versions 0.56 and 0.57, consider implementing additional checks to mitigate the TOCTOU race condition until a patch is available. As a temporary workaround, consider restricting access to the directory tree operations to minimize the risk of exploitation.

إصلاح

Time Of Check To Time Of Use

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2012-5630
OPENSUSE-SU-2024:10368-1

المنتجات المتأثرة

Libuser