UpHeron
All vulnerabilities

Servers and applications

CVE-2013-2207

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

Severity
Low 2.6
Published
9 Oct 2013
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.4% in the next 30 daysHigher than 29% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-264
Attack
Needs local access · Only under certain conditions · No login needed
Attacker can
Read some data · Change some data
CVSS vector
AV:L/AC:H/Au:N/C:P/I:P/A:N
Sources
NVD

Affected software

SoftwareAffected versions
GNU C LibraryServers and applications · cpe:a:gnu:glibc
  • Version 2.16
  • Version 2.15
  • Version 2.14.1
  • Version 2.14
All 26 release lines
  • Every version up to 2.17
  • Version 2.0
  • Version 2.0.1
  • Version 2.0.2
  • Version 2.0.3
  • Version 2.0.4
  • Version 2.0.5
  • Version 2.0.6
  • Version 2.1
  • Version 2.1.1
  • Version 2.1.1.6
  • Version 2.1.2
  • Version 2.1.3
  • Version 2.1.9
  • Version 2.10.1
  • Version 2.11
  • Version 2.11.1
  • Version 2.11.2
  • Version 2.11.3
  • Version 2.12.1
  • Version 2.12.2
  • Version 2.13
  • Version 2.14
  • Version 2.14.1
  • Version 2.15
  • Version 2.16

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2207
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2207