description: alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
problem types: Other
affected:
{
product: alsa-driver
vendor: alsa-driver
versions:
status: affected, version: 1.0.19 and later
}