CVE-2012-5638: Ovirt Sanlock

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Affected products

• Ovirt Sanlock: affected versions not specified

Published 2012-12-20. Last modified 2026-06-16.