| Package | Affected versions | Patched versions |
|---|---|---|
| userv | = 1.0.0 |
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free