CVE-2017-18018

CVE-2017-18018 is a race condition vulnerability in GNU Coreutils through version 8.29, specifically affecting the chown and chgrp utilities when used with the "-R -L" options. This flaw allows a local attacker to modify the ownership of arbitrary files by replacing a plain file with a symlink during the operation. The vulnerability has a CVSS score of 4.7 (Medium), indicating a local attack vector with high attack complexity, but a high impact on integrity with no impact on confidentiality or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.