CVE-2017-15945

7.8 highEPSS 0.4%

High (7.8). EPSS 0.4% chance of exploitation in the next 30 days.

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2017-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mariadb:mariadb
mysql:mysql

References

https://bugs.gentoo.org/630822
https://security.gentoo.org/glsa/201711-04
https://bugs.gentoo.org/630822
https://security.gentoo.org/glsa/201711-04

Check your stack JSON