CVE-2013-2207
EPSS 0.07%
Description
pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
How to fix CVE-2013-2207
To remediate CVE-2013-2207, upgrade the affected package to a fixed version below.
- Debian/glibc—upgrade to 2.21-1 or later
Is CVE-2013-2207 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.21-1