File Deletion Vulnerability in Coreutils by Red Hat
CVE-2015-1865

4.7MEDIUM

Key Information:

Vendor

Gnu
Status
Coreutils
Vendor
CVE Published:
20 September 2017

What is CVE-2015-1865?

The vulnerability in Coreutils version 8.4, specifically in the fts.c file, permits local users to delete arbitrary files on the system. This could lead to unintended data loss and disruption of services, emphasizing the importance of timely updates and security measures to protect against unauthorized file manipulation.

References

http://www.securityfocus.com/bid/76073
vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1211300
x_refsource_CONFIRM

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.