Selinux Project Policycoreutils vulnerabilities

1 known vulnerability affecting selinux_project/policycoreutils.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-1063MEDIUMCVSS 4.4v2.5-11 and newer2018-03-02

CVE-2018-1063 [MEDIUM] CWE-59 CVE-2018-1063: Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivile Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The is