Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-20015

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown.

Published

2022-09-20T18:15:09.897

Last Modified

2025-05-29T14:15:26.540

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-362
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application smokeping smokeping ≤ 2.7.3-r1 Yes
References