GLSA 201709-05: chkrootkit: Local privilege escalation
Severity: | high |
Title: | chkrootkit: Local privilege escalation |
Date: | 09/17/2017 |
Bugs: |
|
ID: | 201709-05 |
Synopsis
A vulnerability in chkrootkit may allow local users to gain root privileges.Background
chkrootkit is a tool to locally check for signs of a rootkit.
Affected packages
Package | Vulnerable | Unaffected | Architecture(s) |
---|---|---|---|
app-forensics/chkrootkit | < 0.50 | >= 0.50 | All supported architectures |
Description
When /tmp is mounted without the noexec option chkrootkit will execute files in /tmp with root privileges.
Impact
A local attacker could possibly execute arbitrary code with root privileges.
Workaround
Users should mount /tmp with noexec option.
Resolution
All chkrootkit users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-forensics/chkrootkit-0.50"
References
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2010 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.