When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that sensitive file. To fix that, glog now causes the program to exit (with status code 2) when it finds that the configured log file already exists.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade golang-glog | Feb 20, 2025 | Jan 28, 2025 |
| Redhat Openshift | — | Upgrade ose-sriov-network-webhookUpgrade metallb-rhel9-operatorUpgrade ose-cloud-credential-rhel9-operatorUpgrade ose-ptp-rhel9Upgrade ose-sriov-network-device-plugin-rhel9Upgrade ose-corednsUpgrade ose-agent-installer-api-server-rhel9Upgrade ose-agent-installer-node-agent-rhel9Upgrade ose-ptp-operatorUpgrade ose-network-metrics-daemon-rhel8Upgrade ose-sriov-dp-admission-controllerUpgrade ose-sriov-network-device-pluginUpgrade ingress-node-firewall-rhel9Upgrade ose-agent-installer-node-agent-rhel8Upgrade metallb-rhel8Upgrade ose-sriov-network-webhook-rhel9Upgrade ose-agent-installer-csr-approver-rhel8Upgrade ose-sriov-dp-admission-controller-rhel9Upgrade ose-ibm-vpc-block-csi-driver-rhel8Upgrade metallb-rhel8-operatorUpgrade ose-ptpUpgrade ose-machine-config-operatorUpgrade kubevirt-csi-driver-rhel8Upgrade ose-agent-installer-api-server-rhel8Upgrade ose-multus-admission-controller-rhel9Upgrade ose-multus-admission-controllerUpgrade ose-network-metrics-daemon-rhel9 | Aug 10, 2026 | Jan 28, 2025 |
| Suse | — | Upgrade grafanaUpgrade google-osconfig-agentUpgrade govulncheck-vulndb | Dec 5, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub