Vulnerability in Runit
CVE-2006-1319
chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified in the -u option, which causes chpst to assign permissions for the root group due to inconsistent bit sizes for the gid_t type.
EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.
Affected products
- Runit — versions 1.3.3.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)