CVE-2020-8024: fallo de gravedad media en openSUSE Leap 15.2
Problematic permissions in hylafax+ packaging allow escalation from uucp to other users
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.5%
A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Productos afectados
openSUSE · openSUSE FactoryopenSUSE · openSUSE Leap 15.1openSUSE · openSUSE Leap 15.2CVEs relacionadas — openSUSE Leap 15.2
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-18904MEDIUMMigrations requests can cause DoS on rmtEPSS 1.6%CVE-2019-3681HIGHosc: stores downloaded (supposed) RPM in network-controlled filesystem pathsEPSS 1.4%CVE-2020-8019HIGHsyslog-ng: Local privilege escalation from new to root in %postEPSS 0.5%CVE-2020-8014HIGHkopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackageEPSS 0.5%CVE-2020-8025MEDIUMoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesEPSS 0.5%CVE-2019-3695HIGHpcp: Local privilege escalation from user pcp to rootEPSS 0.5%