Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-18240
HistoryMar 19, 2018 - 2:29 a.m.

Arbitrary file deletion

2018-03-1902:29:00
PRIOn knowledge base
www.prio-n.com
2

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).

CPENameOperatorVersion
collectdle5.7.2
collectdeq5.7.2 r1

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%