chkrootkit: Local privilege escalation A vulnerability in chkrootkit may allow local users to gain root privileges. chkrootkit 2017-09-17 2017-09-17 512356 local 0.50 0.50

chkrootkit is a tool to locally check for signs of a rootkit.

When /tmp is mounted without the noexec option chkrootkit will execute files in /tmp with root privileges.

A local attacker could possibly execute arbitrary code with root privileges.

Users should mount /tmp with noexec option.

All chkrootkit users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-forensics/chkrootkit-0.50"
CVE-2014-0476 BlueKnight chrisadr