CVE-2018-1063
- State
- Published
- Severity
- Not scored
- Published
- Mar 2, 2018
- Updated
- Aug 5, 2024
- Reserved
- Dec 4, 2017
Description
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Scores
The record has no CVSS score.
Weaknesses
- CWE-59 >CWE-282
Affected Products
| Product | Versions |
|---|---|
policycoreutilsSELinux Project |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.