alsa-utils 1.0.19 and later versions allows local users... · CVE-2009-0035 · GitHub Advisory Database · GitHub

alsa-utils 1.0.19 and later versions allows local users...

Low severity Unreviewed Published Apr 21, 2022 to the GitHub Advisory Database • Updated Jan 27, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

References

Published by the National Vulnerability Database

Nov 9, 2019

Published to the GitHub Advisory Database Apr 21, 2022

Last updated Jan 27, 2023