| Package | Affected versions | Patched versions |
|---|---|---|
| selinux | < 1\:0.10 | 1\:0.10 |
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free