CVE-2017-18018

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-18018

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-18018.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2017-18018

Related

UBUNTU-CVE-2017-18018

Published

2018-01-04T04:29:00Z

Modified

2024-12-05T15:14:41.206492Z

Severity

4.7 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.

References

Affected packages

Alpine:v3.10 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.11 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.12 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.13 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.14 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.15 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.16 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.17 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.18 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.19 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.20 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.21 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Alpine:v3.7 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.28-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

Alpine:v3.8 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.29-r2

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

Alpine:v3.9 / coreutils

Package

Name: coreutils
Purl: pkg:apk/alpine/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.30-r0

Affected versions

7.*

7.1-r0

7.1-r1

7.4-r0

7.5-r0

7.6-r0

8.*

8.2-r0

8.4-r0

8.4-r1

8.4-r2

8.5-r0

8.5-r1

8.6-r0

8.7-r0

8.8-r0

8.9-r0

8.10-r0

8.10-r1

8.10-r2

8.11-r0

8.12-r0

8.12-r1

8.13-r0

8.14-r0

8.15-r0

8.16-r0

8.17-r0

8.18-r0

8.19-r0

8.20-r0

8.20-r1

8.21-r1

8.21-r2

8.21-r3

8.21-r4

8.22-r0

8.22-r1

8.23-r0

8.24-r0

8.25-r0

8.26-r0

8.27-r0

8.28-r0

8.29-r0

8.29-r1

8.29-r2

Debian:11 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.32-4

8.32-4.1

9.*

9.1-1

9.4-1

9.4-2

9.4-3

9.4-3.1

9.5-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.1-1

9.4-1

9.4-2

9.4-3

9.4-3.1

9.5-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.1-1

9.4-1

9.4-2

9.4-3

9.4-3.1

9.5-1

Ecosystem specific

{
    "urgency": "unimportant"
}