CVE-2013-4392

ADVISORY - nist

Summary

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

EPSS Score⁠: 0.00042 (0.051)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-59⁠

Improper Link Resolution Before File Access ('Link Following')

ADVISORY - redhat

CWE-367⁠

Time-of-check Time-of-use (TOCTOU) Race Condition

Impacted images

Advisories

NIST

CREATED

11 years ago

UPDATED

3 years ago

ADVISORY IDCVE-2013-4392⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-59⁠

CVSS SCORE

3.3low

Debian

CREATED

11 years ago

UPDATED

6 days ago

ADVISORY IDCVE-2013-4392⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

11 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2013-4392⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Red Hat

CREATED

11 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2013-4392⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-367⁠

CVSS SCORE

3.3medium