CVE-2015-0796 — open build service source server symlink exploitation via source patch
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes…
Published: 2018-03-02 · CVSS: 6.3 · CVSS 3.0
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7