Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes
Vulnerability Description
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Vulnerability Title
Linenoise 安全漏洞
Vulnerability Description
Linenoise是Salvatore Sanfilippo个人开发者的一个应用软件。 Linenoise存在安全漏洞，该漏洞源于对历史路径的竞争条件可能导致任意文件覆盖和权限更改。
CVSS Information
N/A
Vulnerability Type
N/A