Description (CNA)
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| antirez / linenoise | affected 0 |
CWE
CWE-367
References
- https://github.com/antirez/linenoise/blob/master/linenoise.c#L1321
- https://github.com/antirez/linenoise/pull/202
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.