CVE-2015-1336: Man-DB Project Man-DB

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

Affected products

• Man-DB Project Man-DB: up to and including 2.7.6.1

Published 2017-09-28. Last modified 2026-06-17.