ALT-PU-2021-1148

Высокий

ALT-PU-2021-1148: package trousers update to version 0.3.15-alt1

Источник

errata.altlinux.org

Дата публикации

26.01.2021

Дата обновления

26.01.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades trousers to version 0.3.15-alt1.

Устраненные уязвимости3

CVE-2020-24330

Высокий 7.8

Дата публикации: 13.08.2020

CWE-269

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVSS 3.1

Высокий 7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.2

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

CVE-2020-24330 https://nvd.nist.gov/vuln/detail/CVE-2020-24330

Ссылки1

ALT-PU-2021-1148 https://errata.altlinux.org/ALT-PU-2021-1148

Связанные уязвимости

RLSA-2021:1627

rocky

больше 5 лет назад

Moderate: trousers security, bug fix, and enhancement update

ELSA-2021-1627

oracle-oval

больше 5 лет назад

ELSA-2021-1627: trousers security, bug fix, and enhancement update (MODERATE)

CVE-2020-24330

CVSS3: 7.8

ubuntu

около 6 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVE-2020-24330

CVSS3: 7.8

redhat

около 6 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVE-2020-24330

CVSS3: 7.8

nvd

около 6 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.