CVE-2017-18018: GNU Coreutils

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.

Affected products

• GNU Coreutils: up to and including 8.29

Published 2018-01-04. Last modified 2026-06-17.