{"id":"CVE-2018-1063","aliases":["DEBIAN-CVE-2018-1063","EUVD-2018-11716","GHSA-p5j6-rvwf-qchg","MGASA-2021-0032","RHSA-2018:0913","SUSE-SU-2018:0926-1","SUSE-SU-2018:0927-1","UBUNTU-CVE-2018-1063","openSUSE-SU-2024:11179-1"],"status":"published","title":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local,...","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00402,"percentile":0.34682,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2018-03-02T15:00:00Z","modified":"2026-10-23T18:02:56Z","fixes":[{"ecosystem":"Debian:12","package":"policycoreutils","fixed_in":["2.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"policycoreutils","fixed_in":["2.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"policycoreutils","fixed_in":["2.7-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"policycoreutils","fixed_in":["2.5-14.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-debuginfo","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-devel","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-gui","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-newrole","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-python","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-sandbox","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-restorecond","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-debuginfo","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-newrole","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-python","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-devel","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-gui","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-restorecond","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-sandbox","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-debuginfo","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-devel","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-gui","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-newrole","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-python","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-sandbox","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-restorecond","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-debuginfo","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-devel","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-gui","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-newrole","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-python","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-sandbox","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-restorecond","fixed_in":["0:2.5-22.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"policycoreutils","fixed_in":["2.5-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"policycoreutils","fixed_in":["2.5-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"policycoreutils","fixed_in":["2.5-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"policycoreutils","fixed_in":["2.5-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"policycoreutils","fixed_in":["2.5-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"policycoreutils","fixed_in":["2.0.79-4.9.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"policycoreutils","fixed_in":["2.0.79-4.9.3.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-14.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-newrole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-sandbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"policycoreutils-restorecond","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-newrole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-restorecond","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"policycoreutils-sandbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-newrole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-sandbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"policycoreutils-restorecond","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-newrole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-sandbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"policycoreutils-restorecond","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-22.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.79-4.9.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.79-4.9.3.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.13-2","2.2.1-1","2.2.4-1","2.2.5-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"policycoreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"coreutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1.4"}]}],"bundled":2}],"products":[{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"selinux project","product":"policycoreutils"},{"vendor":"selinux_project","product":"selinux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550122","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Vendor Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0913","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1063","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1063","tags":["report"]},{"url":"https://github.com/advisories/GHSA-p5j6-rvwf-qchg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1063","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0032.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22890","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=974163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1409813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1481191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1499259","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0913.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1063","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180926-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1083624","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1063","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180927-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1063","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7545","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1063","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:00:00Z","modified":"2024-08-05T03:51:47.327Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11716","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:00:00Z","modified":"2024-08-05T03:51:47Z","updated_at":"2026-11-03T02:40:16.874515Z"}],"ghsa":[{"id":"GHSA-p5j6-rvwf-qchg","title":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local,...","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2022-05-14T03:32:25Z","modified":"2023-02-10T05:06:48Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2018-1063","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:29:00.4Z","modified":"2026-06-17T01:50:23.947Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"CVE-2018-1063","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:29:00.4Z","modified":"2026-04-16T04:40:27.836824648Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-1063","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:29:00.4Z","modified":"2026-10-23T18:02:56.719872683Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:0913","title":"Red Hat Security Advisory: policycoreutils security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:49:17Z","modified":"2026-06-27T10:05:26Z","cvss":[{"version":"3.0","score":3.9,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-1063","description":"Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.","status":"published","published":"2018-03-02T15:29:00Z","modified":"2025-10-24T04:46:43Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"MGASA-2021-0032","title":"Updated policycoreutils packages fix a security vulnerability","description":"Context relabeling of filesystems is vulnerable to symbolic link attack,\nallowing a local, unprivileged malicious entity to change the SELinux context\nof an arbitrary file to a context with few restrictions. This only happens when\nthe relabeling process is done, usually when taking SELinux state from disabled\nto enable (permissive or enforcing) (CVE-2018-1063).\n","status":"published","published":"2021-01-17T16:07:01Z","modified":"2026-04-16T04:42:29.94396544Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:11179-1","title":"policycoreutils-3.2-1.4 on GA media","description":"These are all security issues fixed in the policycoreutils-3.2-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:00:45.991828Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:0926-1","title":"Security update for policycoreutils","description":"This update for policycoreutils fixes the following issues:\n\n- CVE-2018-1063: Fixed problem to prevent chcon from following symlinks in /tmp, /var/tmp, /var/run and /var/lib/debug (bsc#1083624).\n","status":"published","published":"2018-04-11T16:01:16Z","modified":"2026-02-04T03:38:05.044624Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0927-1","title":"Security update for policycoreutils","description":"This update for policycoreutils fixes the following issues:\n\n- CVE-2018-1063: Prevent chcon from following symlinks in /tmp, /var/tmp,\n  /var/run and /var/lib/debug (bsc#1083624).  \n","status":"published","published":"2018-04-11T16:02:07Z","modified":"2026-02-04T02:35:18.92177Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}