CVE-2019-20384

概要

参考情報

• openwall.com/lists/oss-security/2020/01/21/1 · Exploit
• bugs.gentoo.org/692492 · Exploit

portage のその他の脆弱性

• CVE-2016-20021緊急 9.8In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file b…
• CVE-2013-2100緊急 9.3The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL…
• CVE-2008-4394中 6.9Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, wh…
• CVE-2007-6249低 2.1etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissi…
• CVE-2004-1901中 5.5Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.