Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-24330

Опубликовано: 02 сент. 2020
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5trousersOut of support scope
Red Hat Enterprise Linux 6trousersOut of support scope
Red Hat Enterprise Linux 7trousersFix deferred
Red Hat Enterprise Linux 8trousersFixedRHSA-2021:162718.05.2021

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-271
https://bugzilla.redhat.com/show_bug.cgi?id=1870054trousers: fails to drop the root gid privilege when no longer needed

EPSS

Процентиль: 41%
0.0019
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVSS3: 7.8
nvd
больше 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVSS3: 7.8
msrc
больше 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user it fails to drop the root gid privilege when no longer needed.

CVSS3: 7.8
debian
больше 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon ...

suse-cvrf
больше 3 лет назад

Security update for trousers

EPSS

Процентиль: 41%
0.0019
Низкий

7.8 High

CVSS3