Skip to content
OpenAdvisories

Vendor

antirez

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.8

    TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes

    TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.