8.4
Élevée
CVE-2026-54369 acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…
Description
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| acl 2.4 | premières → < 2.4.0 | 2.4.0 |
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| Red Hat Enterprise Linux 7 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Hardened Images 2.4 | premières → < 2.4.0-0.1.hum1 | 2.4.0-0.1.hum1 |
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat Update Infrastructure 5 1787241260 | premières → < 1787241260 | 1787241260 |
Afficher les 7 autres branches Masquer les 7 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Discovery 2 1784821750 | premières → < 1784821750 | 1784821750 |
| Red Hat OpenShift distributed tracing 3.10.1 1785704636 | premières → < 1785704636 | 1785704636 |
| Red Hat OpenShift distributed tracing 3.10.2 1785704636 | premières → < 1785704636 | 1785704636 |
| Red Hat Insights proxy 1.5 1786433656 | premières → < 1786433656 | 1786433656 |
| Red Hat OpenShift distributed tracing 3.10.0 1785704636 | premières → < 1785704636 | 1785704636 |
| Red Hat OpenShift Container Platform 4.22 4.22 | premières → < 4.22.9.8.202608130832-0 | 4.22.9.8.202608130832-0 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions non publiées |
Références
- cgit.git.savannah.nongnu.org cgit.git.savannah.nongnu.org
- cgit.git.savannah.nongnu.org cgit.git.savannah.nongnu.org
- www.vulncheck.com www.vulncheck.com
Chronologie
- Publiée
- Dernière modification