Vulnerability Details CVE-2017-18284
The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.4%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 3.6
Products affected by CVE-2017-18284
-
cpe:2.3:a:burp_project:burp:1.1.40
-
cpe:2.3:a:burp_project:burp:1.1.51
-
cpe:2.3:a:burp_project:burp:1.1.55
-
cpe:2.3:a:burp_project:burp:1.1.57
-
cpe:2.3:a:burp_project:burp:1.1.65
-
cpe:2.3:a:burp_project:burp:1.1.70
-
cpe:2.3:a:burp_project:burp:1.2.0
-
cpe:2.3:a:burp_project:burp:1.2.2
-
cpe:2.3:a:burp_project:burp:1.2.3
-
cpe:2.3:a:burp_project:burp:1.2.4
-
cpe:2.3:a:burp_project:burp:1.2.5
-
cpe:2.3:a:burp_project:burp:1.2.6
-
cpe:2.3:a:burp_project:burp:1.2.7
-
cpe:2.3:a:burp_project:burp:1.2.8
-
cpe:2.3:a:burp_project:burp:1.3.0
-
cpe:2.3:a:burp_project:burp:1.3.1
-
cpe:2.3:a:burp_project:burp:1.3.10
-
cpe:2.3:a:burp_project:burp:1.3.12
-
cpe:2.3:a:burp_project:burp:1.3.14
-
cpe:2.3:a:burp_project:burp:1.3.16
-
cpe:2.3:a:burp_project:burp:1.3.18
-
cpe:2.3:a:burp_project:burp:1.3.2
-
cpe:2.3:a:burp_project:burp:1.3.20
-
cpe:2.3:a:burp_project:burp:1.3.22
-
cpe:2.3:a:burp_project:burp:1.3.24
-
cpe:2.3:a:burp_project:burp:1.3.26
-
cpe:2.3:a:burp_project:burp:1.3.28
-
cpe:2.3:a:burp_project:burp:1.3.30
-
cpe:2.3:a:burp_project:burp:1.3.32
-
cpe:2.3:a:burp_project:burp:1.3.34
-
cpe:2.3:a:burp_project:burp:1.3.36
-
cpe:2.3:a:burp_project:burp:1.3.38
-
cpe:2.3:a:burp_project:burp:1.3.4
-
cpe:2.3:a:burp_project:burp:1.3.40
-
cpe:2.3:a:burp_project:burp:1.3.42
-
cpe:2.3:a:burp_project:burp:1.3.44
-
cpe:2.3:a:burp_project:burp:1.3.46
-
cpe:2.3:a:burp_project:burp:1.3.48
-
cpe:2.3:a:burp_project:burp:1.3.6
-
cpe:2.3:a:burp_project:burp:1.3.8
-
cpe:2.3:a:burp_project:burp:1.4.0
-
cpe:2.3:a:burp_project:burp:1.4.10
-
cpe:2.3:a:burp_project:burp:1.4.12
-
cpe:2.3:a:burp_project:burp:1.4.14
-
cpe:2.3:a:burp_project:burp:1.4.16
-
cpe:2.3:a:burp_project:burp:1.4.18
-
cpe:2.3:a:burp_project:burp:1.4.2
-
cpe:2.3:a:burp_project:burp:1.4.20
-
cpe:2.3:a:burp_project:burp:1.4.22
-
cpe:2.3:a:burp_project:burp:1.4.24
-
cpe:2.3:a:burp_project:burp:1.4.26
-
cpe:2.3:a:burp_project:burp:1.4.28
-
cpe:2.3:a:burp_project:burp:1.4.30
-
cpe:2.3:a:burp_project:burp:1.4.32
-
cpe:2.3:a:burp_project:burp:1.4.34
-
cpe:2.3:a:burp_project:burp:1.4.36
-
cpe:2.3:a:burp_project:burp:1.4.38
-
cpe:2.3:a:burp_project:burp:1.4.4
-
cpe:2.3:a:burp_project:burp:1.4.40
-
cpe:2.3:a:burp_project:burp:1.4.6
-
cpe:2.3:a:burp_project:burp:1.4.8
-
cpe:2.3:a:burp_project:burp:2.0.0
-
cpe:2.3:a:burp_project:burp:2.0.1
-
cpe:2.3:a:burp_project:burp:2.0.10
-
cpe:2.3:a:burp_project:burp:2.0.12
-
cpe:2.3:a:burp_project:burp:2.0.14
-
cpe:2.3:a:burp_project:burp:2.0.16
-
cpe:2.3:a:burp_project:burp:2.0.18
-
cpe:2.3:a:burp_project:burp:2.0.20
-
cpe:2.3:a:burp_project:burp:2.0.22
-
cpe:2.3:a:burp_project:burp:2.0.24
-
cpe:2.3:a:burp_project:burp:2.0.26
-
cpe:2.3:a:burp_project:burp:2.0.28
-
cpe:2.3:a:burp_project:burp:2.0.30
-
cpe:2.3:a:burp_project:burp:2.0.32
-
cpe:2.3:a:burp_project:burp:2.0.34
-
cpe:2.3:a:burp_project:burp:2.0.36
-
cpe:2.3:a:burp_project:burp:2.0.38
-
cpe:2.3:a:burp_project:burp:2.0.4
-
cpe:2.3:a:burp_project:burp:2.0.40
-
cpe:2.3:a:burp_project:burp:2.0.42
-
cpe:2.3:a:burp_project:burp:2.0.44
-
cpe:2.3:a:burp_project:burp:2.0.46
-
cpe:2.3:a:burp_project:burp:2.0.48
-
cpe:2.3:a:burp_project:burp:2.0.5
-
cpe:2.3:a:burp_project:burp:2.0.50
-
cpe:2.3:a:burp_project:burp:2.0.52
-
cpe:2.3:a:burp_project:burp:2.0.54
-
cpe:2.3:a:burp_project:burp:2.0.8
-
cpe:2.3:a:burp_project:burp:2.1.0
-
cpe:2.3:a:burp_project:burp:2.1.10
-
cpe:2.3:a:burp_project:burp:2.1.12
-
cpe:2.3:a:burp_project:burp:2.1.14
-
cpe:2.3:a:burp_project:burp:2.1.16
-
cpe:2.3:a:burp_project:burp:2.1.18
-
cpe:2.3:a:burp_project:burp:2.1.2
-
cpe:2.3:a:burp_project:burp:2.1.20
-
cpe:2.3:a:burp_project:burp:2.1.22
-
cpe:2.3:a:burp_project:burp:2.1.24
-
cpe:2.3:a:burp_project:burp:2.1.26
-
cpe:2.3:a:burp_project:burp:2.1.28
-
cpe:2.3:a:burp_project:burp:2.1.30
-
cpe:2.3:a:burp_project:burp:2.1.4
-
cpe:2.3:a:burp_project:burp:2.1.6
-
cpe:2.3:a:burp_project:burp:2.1.8
-