The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade augeas | Aug 30, 2017 | Jan 22, 2014 |
| Centos_linux | — | Upgrade augeas-develUpgrade augeas-libsUpgrade augeas | Dec 1, 2016 | Jan 22, 2014 |
| Debian | — | Upgrade augeas | Jul 30, 2024 | Jan 23, 2014 |
| Oracle_linux | — | Upgrade augeas-develUpgrade augeasUpgrade augeas-libs | Oct 16, 2024 | Jan 23, 2014 |
| Suse | — | Upgrade augeasUpgrade augeas-develUpgrade libaugeas0Upgrade augeas-lensesUpgrade sle-sdk-release | Sep 30, 2014 | Jan 22, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub