Man Db Project Man Db vulnerabilities

2 vulnerabilities

Known vulnerabilities in Man Db Project Man Db, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2018-25078man-db_projectman-db
EPSS score
0.38%
man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)7.8CVE-2015-1336debianman-db+2
EPSS score
1.05%
The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.