Vulnerability Details CVE-2017-14484
The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.3%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 6.9
References
Products affected by CVE-2017-14484
-
cpe:2.3:a:gentoo:sci-mathematics-gimps:28.10