CVE-2018-0492: vulnerability in beep
Published · Updated
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.6%
from disclosure to weapon3 days
Published on NVDApr 3
1st PoC+3d
exploitation probability
1.6%top 26% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Affected products
n/a · beeppublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/44452unverifiedcve_referencewww.exploit-db.com/exploits/44452/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://lists.debian.org/debian-lts-announce/2018/04/msg00002.htmlhttps://lists.debian.org/debian-security-announce/2018/msg00089.htmlhttps://security.gentoo.org/glsa/201805-15https://security-tracker.debian.org/tracker/CVE-2018-0492https://www.debian.org/security/2018/dsa-4163https://www.exploit-db.com/exploits/44452/