CVE-2018-6557 Insecure temporary file use in base-files

2018-08-2116:00:00

canonical

www.cve.org

AI Score

7.1

Confidence

High

EPSS

Percentile

5.1%

JSON

The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled.

CNA Affected

[
  {
    "product": "base-files",
    "vendor": "Ubuntu",
    "versions": [
      {
        "lessThan": "10.1ubuntu2.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]