CVE-2015-1865

CWE-362 — Race ConditionCWE-3677 documents7 sources
Severity
5.1MEDIUM
EPSS
0.1%
top 77.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Coreutils
Timeline
PublishedSep 20
Latest updateMay 17

Description

fts.c in coreutils 8.4 allows local users to delete arbitrary files.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 1.4 | Impact: 3.6

Affected Packages2 packages

▶Debiancoreutils< 8.13-1+3
▶NVDgnu/coreutils8.4

🔴Vulnerability Details

3
GHSA
GHSA-3x5m-g386-pxwq: fts↗2022-05-17
▶
OSV
CVE-2015-1865: fts↗2017-09-20
▶
CVEList
CVE-2015-1865: fts↗2017-09-20
▶

📋Vendor Advisories

2
Red Hat
coreutils: "time of check to time of use" race condition fts.c↗2015-04-14
▶
Debian
CVE-2015-1865: coreutils - fts.c in coreutils 8.4 allows local users to delete arbitrary files.↗2015
▶

💬Community

1
Bugzilla
CVE-2015-1865 coreutils: "time of check to time of use" race condition fts.c↗2015-04-13
▶