Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
| Suse | — | Upgrade perf | Dec 12, 2013 | Mar 1, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-server | Nov 8, 2024 | Mar 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub