---

CVE-2018-6954 - log back

CVE-2018-6954 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Local
Type	+ Arbitrary file overwrite
Description	+ systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
References	+ https://github.com/systemd/systemd/issues/7986 + https://github.com/systemd/systemd/pull/8822
Notes