What is CVE-2015-0267?

CVE-2015-0267 is a vulnerability in Red Hat Kexec-Tools. Published 2015-05-19.

Is CVE-2015-0267 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Red Hat Kexec-Tools

CVE-2015-0267

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.

EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.

Affected products

Redhat Kexec-tools
N/a — versions n/a

Public proof-of-concept exploits

af6140/vulners-service

References

secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2015-0267?: CVE-2015-0267 is a vulnerability in Red Hat Kexec-Tools. Published 2015-05-19.
Is CVE-2015-0267 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.