PT-2018-19214 · Oracle · Libdb-4 8

Publicado 2018-02-21 · Atualizado 2018-02-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libdb-4 8 (affected versions not specified)

Description The issue allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application using libdb-4 8. This occurs when a DB CONFIG file is present in the current working directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

SUSE-SU-2018:0510-1

Produtos afetados

Libdb-4 8

Referências · 3

• https://suse.com/support/update/announcement/2018/suse-su-20180510-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0510-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1043886 · Nota