Vulnerability Details CVE-2018-0492
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.6%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 4.4
References
- https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html
- https://lists.debian.org/debian-security-announce/2018/msg00089.html
- https://security-tracker.debian.org/tracker/CVE-2018-0492
- https://security.gentoo.org/glsa/201805-15
- https://www.debian.org/security/2018/dsa-4163
- https://www.exploit-db.com/exploits/44452/
- https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html
- https://lists.debian.org/debian-security-announce/2018/msg00089.html
- https://security-tracker.debian.org/tracker/CVE-2018-0492
- https://security.gentoo.org/glsa/201805-15
- https://www.debian.org/security/2018/dsa-4163
- https://www.exploit-db.com/exploits/44452/
Products affected by CVE-2018-0492
-
cpe:2.3:a:beep_project:beep:0.4
-
cpe:2.3:a:beep_project:beep:0.5
-
cpe:2.3:a:beep_project:beep:0.6
-
cpe:2.3:a:beep_project:beep:0.6.1
-
cpe:2.3:a:beep_project:beep:1.0.0
-
cpe:2.3:a:beep_project:beep:1.0.1
-
cpe:2.3:a:beep_project:beep:1.0.2
-
cpe:2.3:a:beep_project:beep:1.2.0
-
cpe:2.3:a:beep_project:beep:1.2.1
-
cpe:2.3:a:beep_project:beep:1.2.2
-
cpe:2.3:a:beep_project:beep:1.3
-
cpe:2.3:a:beep_project:beep:1.3.4
-
cpe:2.3:o:debian:debian_linux:7.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0