5.5
Medium
CVE-2017-2616 A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes
Description
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| util-linux | 2.32.1 | No fix stated |
References
- bugzilla.redhat.com bugzilla.redhat.com
- 96404 www.securityfocus.com
- RHSA-2017:0907 access.redhat.com
- RHSA-2017:0654 rhn.redhat.com
- GLSA-201706-02 security.gentoo.org
- DSA-3793 www.debian.org
- github.com github.com
- 1038271 www.securitytracker.com
Timeline
- Published
- Last modified