Base Score

HIGH7

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.

VectorLOCAL

Published Bysecurity@debian.org

Published DateApr 03, 2018, 07:29

Weakness Type (CWE):CWE-362

CVSS Metrics

Base Score

Vector String

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html
https://lists.debian.org/debian-security-announce/2018/msg00089.html
https://security-tracker.debian.org/tracker/CVE-2018-0492
https://security.gentoo.org/glsa/201805-15
https://www.debian.org/security/2018/dsa-4163
https://www.exploit-db.com/exploits/44452/

Base Score

HIGH7

Weakness Type (CWE):CWE-362

CVSS Metrics

Base Score

Vector String

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH