CVE-2018-1122
Public on 2018-05-23
Modified on 2019-10-23
Description
If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.
CVSS v3 Base Score
See breakdown
