Approved changes feed: RSS · Atom
cpe:2.3:a:libcap_project:libcap:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Libcap Project (99765cde-b1c2-5e17-841c-f8f13c2b711f) |
|---|---|
| Product | Libcap (4d150a2d-2298-5277-8d24-d69a51f616ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libcap2 |
purl2cpe | 2026-06-01 10:14:01.858315 |
pkg:deb/ubuntu/libcap2 |
purl2cpe | 2026-06-01 10:14:01.858318 |
pkg:github/distrotech/libcap |
purl2cpe | 2026-06-01 10:14:01.858320 |
pkg:github/mhiramat/libcap |
purl2cpe | 2026-06-01 10:14:01.858322 |
pkg:gitlab/redhat/libcap |
purl2cpe | 2026-06-01 10:14:01.858324 |
pkg:rpm/centos/libcap |
purl2cpe | 2026-06-01 10:14:01.858325 |
pkg:rpm/fedora/libcap |
purl2cpe | 2026-06-01 10:14:01.858327 |
pkg:rpm/opensuse/libcap |
purl2cpe | 2026-06-01 10:14:01.858329 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4878 |
vulnerable | 2026-06-08 08:07:02.580368 |
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
MEDIUM (6.7)
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
Published: 2026-04-09T14:49:02.942Z
Updated: 2026-11-04T22:41:53.422Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.