Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PulseAudio 'core-util.c'pa_make_secure_dir函数临时文件创建漏洞
Vulnerability Description
PulseAudio是一个跨平台的且通过网络工作的声音服务，它支持对应用程序进行音量控制、将多块声卡成一个声卡和同步播放多个音频流等。 PulseAudio的core-util.c中的pa_make_secure_dir函数存在临时文件创建漏洞。本地用户通过一个/tmp/.esd-#####临时文件的symlink攻击，改变任意文件的权限。
CVSS Information
N/A
Vulnerability Type
N/A