CVE-2017-14484

Summary

CVE	CVE-2017-14484
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-09-15 10:29:00 UTC
Updated	2019-10-03 00:03:00 UTC
Description	The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.

Risk And Classification

Problem Types: CWE-269

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Gentoo	Sci-mathematics-gimps	28.10	All	All	All
Application	Gentoo	Sci-mathematics-gimps	28.10	All	All	All

References

Reference	Source	Link	Tags
603408 – (CVE-2017-14484) <sci-mathematics/gimps-28.10-r1: root privilege escalation in init script	CONFIRM	bugs.gentoo.org	Issue Tracking, Patch, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

710527 Gentoo Linux GIMPS Root privilege escalation Vulnerability (GLSA 201709-11)