CVE-2021-42257
check_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a numbe…
Published: 2021-10-11 · CVSS: Unscored
check_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7