VYPR

SELinux initscript

by Ubuntu

CVEs (1)

  • CVE-2011-3151Apr 22, 2019
    risk 0.00cvss epss 0.01

    The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.