CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. See the original NVD description below for full technical details.
CVE
CVE-2017-18240
Severity
MEDIUM
CVSS
5.5
EPSS
0.36%
Original NVD Description
The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL (when the service is stopped).
Related CVEs
Other vulnerabilities affecting the same vendor(s)