CVE-2017-8108 log
| Source |
|
| Severity | High |
| Remote | No |
| Type | Arbitrary file overwrite |
| Description | Michael Scherer discovered that some Lynis tests reuse the same temporary file. As some tests remove the temporary file, this might give an attacker the possibility to perform a link following attack. While timing must be perfect, there is a very small time window in which the attack can recreate the temporary file and symlink it to another resource, like a file. In this case data may be overwritten, or possibly executed. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-278 | lynis | 2.4.9-1 | 2.5.0-1 | High | Fixed | FS#54067 |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 22 May 2017 | ASA-201705-20 | AVG-278 | lynis | High | arbitrary file overwrite |
| References |
|---|
https://cisofy.com/security/cve/cve-2017-8108/ |