CVE-2018-1063
published 2018-03-02CVE-2018-1063: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an…
PriorityP420medium4.4CVSS 3.0
AVLACLPRLUINSUCLILAN
EPSS
0.39%
31.7th percentile
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | policycoreutils | < policycoreutils 2.7-1 (bookworm) | policycoreutils 2.7-1 (bookworm) |
| redhat | enterprise_linux | — | — |
| selinux_project | policycoreutils | — | — |
| selinux_project | policycoreutils | >= 0 < 2.7-1 | 2.7-1 |
| selinux_project | policycoreutils | >= 0 < 2.7-1 | 2.7-1 |
| selinux_project | policycoreutils | >= 0 < 2.7-1 | 2.7-1 |
| selinux_project | policycoreutils | >= 0 < 2.7-1 | 2.7-1 |
CVSS provenance
nvdv3.04.4MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv2.03.3LOWAV:L/AC:M/Au:N/C:P/I:P/A:N
osv4.4MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead
vendor_redhat·2018-02-28·CVSS 4.4
CVE-2018-1063 [MEDIUM] CWE-59 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead
policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux s
Debian
CVE-2018-1063: policycoreutils - Context relabeling of filesystems is vulnerable to symbolic link attack, allowin...
vendor_debian·2018·CVSS 4.4
CVE-2018-1063 [MEDIUM] CVE-2018-1063: policycoreutils - Context relabeling of filesystems is vulnerable to symbolic link attack, allowin...
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Scope: local
bookworm: resolved (fixed in 2.7-1)
bullseye: resolved (fixed in 2.7-1)
forky: resolved (fixed in 2.7-1)
sid: resolved (fixed in 2.7-1)
trixie: resolved (fixed in 2.7-1)
GHSA
GHSA-p5j6-rvwf-qchg: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context
ghsa_unreviewed·2022-05-14
CVE-2018-1063 [MEDIUM] CWE-59 GHSA-p5j6-rvwf-qchg: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
OSV
CVE-2018-1063: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context
osv·2018-03-02·CVSS 4.4
CVE-2018-1063 [MEDIUM] CVE-2018-1063: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
No detection rules found.
No public exploits indexed.
2018-03-02
Published