The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has chown -R calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Logstash | Elasticsearch | 5.0.0 (including) | 5.0.0 (including) |
| Logstash | Elasticsearch | 5.0.1 (including) | 5.0.1 (including) |
| Logstash | Elasticsearch | 5.0.2 (including) | 5.0.2 (including) |
| Logstash | Elasticsearch | 5.1.1 (including) | 5.1.1 (including) |
| Logstash | Elasticsearch | 5.1.2 (including) | 5.1.2 (including) |
| Logstash | Elasticsearch | 5.2.0 (including) | 5.2.0 (including) |
| Logstash | Elasticsearch | 5.2.1 (including) | 5.2.1 (including) |
| Logstash | Elasticsearch | 5.3.0 (including) | 5.3.0 (including) |
| Logstash | Elasticsearch | 5.3.1 (including) | 5.3.1 (including) |
| Logstash | Elasticsearch | 5.3.2 (including) | 5.3.2 (including) |
| Logstash | Elasticsearch | 5.4.1 (including) | 5.4.1 (including) |
| Logstash | Elasticsearch | 5.4.2 (including) | 5.4.2 (including) |
| Logstash | Elasticsearch | 5.4.3 (including) | 5.4.3 (including) |
| Logstash | Elasticsearch | 5.5.0 (including) | 5.5.0 (including) |
| Logstash | Elasticsearch | 5.5.1 (including) | 5.5.1 (including) |
| Logstash | Elasticsearch | 5.5.2 (including) | 5.5.2 (including) |
| Logstash | Elasticsearch | 5.6.0 (including) | 5.6.0 (including) |