enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enlightenment | Enlightenment | * | 0.25.4 (excluding) |
| E17 | Ubuntu | bionic | * |
| E17 | Ubuntu | kinetic | * |
| E17 | Ubuntu | lunar | * |
| E17 | Ubuntu | mantic | * |
| E17 | Ubuntu | trusty | * |
| E17 | Ubuntu | xenial | * |