VDB
CVE-2015-0267
CVE-2015-0267
PUBLISHED
CVSS 3.5999999046325684 LOW
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.
EPSS 0.36% · 27.9th percentile
Risk Scores
CVSS 2.0
3.5999999046325684
EPSS Score
0.36%
27.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redhat | kexec-tools | 0 |
| n/a | n/a | * |
Timeline
- May 12, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 17, 2022 CVE Updated
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-0267 advisory
- https://access.redhat.com/errata/RHSA-2015:0986 url
- https://access.redhat.com/security/cve/CVE-2015-0267 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1191575 url
- http://www.securityfocus.com/bid/74622 url
- http://rhn.redhat.com/errata/RHSA-2015-0986.html advisory