Errata ID | 77 |
---|---|
Date | 2017-07-05 |
Source package | eject |
Fixed in version | 2.1.5+deb1+cvs20081104-13.A~4.2.1.201706301735 |
Description | This update addresses the following issue(s): * dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. (CVE-2017-6964) |
Additional notes | |
CVE ID | CVE-2017-6964 |
UCS Bug number | #44410 |