Rapid7

vulnerability

Amazon Linux AMI: CVE-2017-8108: Security patch for lynis (ALAS-2017-847)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Jun 8, 2017
Added
Jun 23, 2017
Modified
Oct 14, 2022

Description

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.

Solution

amazon-linux-upgrade-lynis
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.