Vulnerability Report: GO-2020-0027

  • CVE-2018-6558, GHSA-qj26-7grj-whg3
  • Affects: github.com/google/fscrypt
  • Published: Apr 14, 2021
  • Modified: Jun 12, 2023

After dropping and then elevating process privileges euid, guid, and groups are not properly restored to their original values, allowing an unprivileged user to gain membership in the root group.

Affected Packages

Aliases

References

Feedback

See anything missing or incorrect? Suggest an edit to this report.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.