{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T23:57:44.284","vulnerabilities":[{"cve":{"id":"CVE-2017-16638","sourceIdentifier":"cve@mitre.org","published":"2017-11-06T23:29:00.297","lastModified":"2026-06-17T01:09:35.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the \"qemu\" group to gain root privileges by creating a hard link in a directory on which \"chown\" is called recursively by the OpenRC service script."},{"lang":"es","value":"El paquete de Gentoo net-misc/vde en versiones anteriores a la 2.3.2-r4 podría permitir que miembros del grupo \"qemu\" obtengan privilegios root mediante la creación de un vínculo físico en un directorio en el que \"chown\" es llamado recursivamente por el script de servicio OpenRC."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vde_project:vde:*:r4:*:*:*:gentoo:*:*","versionEndExcluding":"2.3.2","matchCriteriaId":"8109690A-D695-4D1C-8C7A-CBD004CA9888"}]}]}],"references":[{"url":"https://bugs.gentoo.org/603382","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201711-11","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/603382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201711-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}}]}