← back
CVE-2018-0492

CVE-2018-0492

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.7%
from disclosure to weapon3 days
Published on NVDApr 3
1st PoC+3d
exploitation probability
1.7%top 26% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Affected products
n/a · beep
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44452/unverifiedexploitdbwww.exploit-db.com/exploits/44452unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://lists.debian.org/debian-lts-announce/2018/04/msg00002.htmlhttps://lists.debian.org/debian-security-announce/2018/msg00089.htmlhttps://security.gentoo.org/glsa/201805-15https://security-tracker.debian.org/tracker/CVE-2018-0492https://www.debian.org/security/2018/dsa-4163https://www.exploit-db.com/exploits/44452/