Description
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a beep
beepaffected
References
- https://www.exploit-db.com/exploits/44452/ ↗
- https://www.debian.org/security/2018/dsa-4163 ↗
- https://security-tracker.debian.org/tracker/CVE-2018-0492 ↗
- https://lists.debian.org/debian-security-announce/2018/msg00089.html ↗
- https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html ↗
- https://security.gentoo.org/glsa/201805-15 ↗