Skip to content
OpenAdvisories

Package · Debian

acl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.3
    CVE-2026-54370

    acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl

    acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-fo…

    acl project acl acl acl Debian Ubuntu
  • High 7.1
    CVE-2026-54369

    acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

    acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathn…

    acl project acl acl acl Debian Ubuntu
  • Unscored —
    CVE-2009-4411

    The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links …

    acl Debian