CVE-2017-14484

CVE-2017-14484 describes a local privilege escalation vulnerability in the Gentoo sci-mathematics/gimps package prior to version 28.10-r1. An attacker can exploit an unsafe "chown -R" command by creating a hard link under /var/lib/gimps, leading to unauthorized privilege gain. With a CVSS score of 7.3 (High), this vulnerability has a low attack complexity and requires local access, but can result in high impact to confidentiality, integrity, and availability. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.