Openrc Project Openrc
2 CVEs affecting Openrc Project Openrc. Latest disclosed: 2021-10-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42341 | High | 7.5 | 2021-10-14 | checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. Th… |
CVE-2018-21269 | Medium | 5.5 | 2020-10-27 | checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink. |