漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Information
N/A
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Vulnerability Title
rpm 安全漏洞
Vulnerability Description
rpm是一个强大的命令行驱动的软件包管理工具,用来安装、卸载、校验、查询和更新 Linux 系统上的软件包。 rpm 存在安全漏洞,该漏洞源于在rpm中发现竞争条件漏洞,本地非特权用户可以利用这个缺陷绕过响应CVE-2017-7500和CVE-2017-7501时引入的检查,从而可能获得根权限。攻击者可利用该漏洞威胁数据机密性和完整性以及系统可用性。
CVSS Information
N/A
Vulnerability Type
N/A