CVE-2017-18018

Note

It seems like this will not be fixed upstream (due to the
nature of the chown and chgrp utilities), the available
patch being a documentation change to warn users about
insecure software behavior when certain options are used
together in chown and chgrp. For this reason, we will not
be fixing this issue in releases where it would be needed.
These will be marked as ignored.

Package	Release	Status
coreutils Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Ignored (documentation patch only)
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Not vulnerable (8.30-3ubuntu2)
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Not vulnerable (8.32-4ubuntu2)
	jammy	Not vulnerable (8.32-4ubuntu3)
	trusty	Ignored (documentation patch only)
	upstream	Ignored
	xenial	Ignored (documentation patch only)
	zesty	Ignored (end of life)

Parameter	Value
Base score	4.7
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	High
Availability impact	None
Vector	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

CVE-2017-18018

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading