Vendor
antirez
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.8
TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.