Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
pigz 竞争条件漏洞
Vulnerability Description
pigz是美国软件开发者Mark Adler所研发的一套用于替代gzip的文件压缩应用程序。 pigz 2.2.4-1及之前的版本中存在竞争条件漏洞，该漏洞源于在解压缩期间程序使用错误的全局可写权限。本地攻击者可利用该漏洞绕过既定的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A