Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libcap capsh 权限许可和访问控制漏洞
Vulnerability Description
Libcap是西班牙软件开发者Luis MartinGarcia所研发的一个用于Unix、Linux平台下的网络数据包捕获库，它提供了系统独立的网络数据包捕获接口，并通过该库中的函数分析捕获网络环境下的数据流量。 Libcap 2.22之前的版本中的capsh程序中存在安全漏洞，该漏洞源于当指定‘--chroot’选项时，程序没有更改当前工作目录。本地攻击者可利用该漏洞绕过更改根目录限制。
CVSS Information
N/A
Vulnerability Type
N/A