https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:53:16 +0000 https://db.gcve.eu/vuln/cnvd-2022-86337 cnvd-2022-86337 https://db.gcve.eu/vuln/cnvd-2022-86337 https://db.gcve.eu/vuln/fkie_cve-2022-42917 <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> https://db.gcve.eu/vuln/fkie_cve-2022-42917 https://db.gcve.eu/vuln/ghsa-x36x-qpcf-qwfj <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> https://db.gcve.eu/vuln/ghsa-x36x-qpcf-qwfj https://db.gcve.eu/vuln/gsd-2022-42917 gsd-2022-42917 https://db.gcve.eu/vuln/gsd-2022-42917 https://db.gcve.eu/vuln/opensuse-su-2024:12516-1 <p>frr-8.4-1.1 on GA media</p> <p>frr-8.4-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2024:12516-1 https://db.gcve.eu/vuln/suse-su-2022:4130-1 <p>Security update for frr</p> <p>Security update for frr</p> https://db.gcve.eu/vuln/suse-su-2022:4130-1 https://db.gcve.eu/vuln/ubuntu-cve-2022-42917 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: quagga, Ubuntu:Pro:18.04:LTS: quagga, Ubuntu:20.04:LTS: quagga, Ubuntu:Pro:20.04:LTS: frr, Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr, Ubuntu:26.04:LTS: frr</p> <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: quagga, Ubuntu:Pro:18.04:LTS: quagga, Ubuntu:20.04:LTS: quagga, Ubuntu:Pro:20.04:LTS: frr, Ubuntu:22.04:LTS: frr, Ubuntu:24.04:LTS: frr, Ubuntu:26.04:LTS: frr</p> <p>In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.</p> https://db.gcve.eu/vuln/ubuntu-cve-2022-42917