| ID |
CVE-2026-8784
|
| Sažetak |
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named b4a3a695c9873f824907bd15659f2a6ac7667b4f. It is recommended to apply a patch to fix this issue. |
| Reference |
|
| CVSS |
| Base: | 4.0 |
| Impact: | 6.4 |
| Exploitability: | 2.5 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| LOCAL |
LOW |
MULTIPLE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| CVSS vektor |
AV:L/AC:L/Au:M/C:P/I:P/A:P |
| Zadnje važnije ažuriranje |
18-05-2026 - 19:22 |
| Objavljeno |
18-05-2026 - 04:16 |
