Vulnerability-Lookup

OPENSUSE-SU-2024:10852-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:06

Summary

hylafax+-7.0.3-5.1 on GA media

Severity

Moderate

Notes

Title of the patch: hylafax+-7.0.3-5.1 on GA media

Description of the patch: These are all security issues fixed in the hylafax+-7.0.3-5.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-10852

CVE-2018-17141

9 (Critical)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64	—	Vendor Fix

Threats

Impact critical

CVE-2020-15396

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-17141

Threats

Impact important

CVE-2020-15397

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2018-17141

Threats

Impact important

CVE-2020-8024

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 12 products, the same list as for CVE-2018-17141

Threats

Impact moderate

References

14 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2018-17141/	self
https://www.suse.com/security/cve/CVE-2020-15396/	self
https://www.suse.com/security/cve/CVE-2020-15397/	self
https://www.suse.com/security/cve/CVE-2020-8024/	self
https://www.suse.com/security/cve/CVE-2018-17141	external
https://bugzilla.suse.com/1109084	external
https://www.suse.com/security/cve/CVE-2020-15396	external
https://bugzilla.suse.com/1173521	external
https://www.suse.com/security/cve/CVE-2020-15397	external
https://bugzilla.suse.com/1173519	external
https://www.suse.com/security/cve/CVE-2020-8024	external
https://bugzilla.suse.com/1172731	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "hylafax+-7.0.3-5.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the hylafax+-7.0.3-5.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10852",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10852-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-17141 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-17141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-15396 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-15396/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-15397 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-15397/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8024 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8024/"
      }
    ],
    "title": "hylafax+-7.0.3-5.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-20T20:06:47Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10852-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T20:06:47Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hylafax+-0:7.0.3-5.1.aarch64",
                "product": {
                  "name": "hylafax+-0:7.0.3-5.1.aarch64",
                  "product_id": "hylafax+-0:7.0.3-5.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+@7.0.3-5.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hylafax+-client-0:7.0.3-5.1.aarch64",
                "product": {
                  "name": "hylafax+-client-0:7.0.3-5.1.aarch64",
                  "product_id": "hylafax+-client-0:7.0.3-5.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+-client@7.0.3-5.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
                "product": {
                  "name": "libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
                  "product_id": "libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libfaxutil7_0_3@7.0.3-5.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hylafax+-0:7.0.3-5.1.ppc64le",
                "product": {
                  "name": "hylafax+-0:7.0.3-5.1.ppc64le",
                  "product_id": "hylafax+-0:7.0.3-5.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+@7.0.3-5.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hylafax+-client-0:7.0.3-5.1.ppc64le",
                "product": {
                  "name": "hylafax+-client-0:7.0.3-5.1.ppc64le",
                  "product_id": "hylafax+-client-0:7.0.3-5.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+-client@7.0.3-5.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
                "product": {
                  "name": "libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
                  "product_id": "libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libfaxutil7_0_3@7.0.3-5.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hylafax+-0:7.0.3-5.1.s390x",
                "product": {
                  "name": "hylafax+-0:7.0.3-5.1.s390x",
                  "product_id": "hylafax+-0:7.0.3-5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+@7.0.3-5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hylafax+-client-0:7.0.3-5.1.s390x",
                "product": {
                  "name": "hylafax+-client-0:7.0.3-5.1.s390x",
                  "product_id": "hylafax+-client-0:7.0.3-5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+-client@7.0.3-5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libfaxutil7_0_3-0:7.0.3-5.1.s390x",
                "product": {
                  "name": "libfaxutil7_0_3-0:7.0.3-5.1.s390x",
                  "product_id": "libfaxutil7_0_3-0:7.0.3-5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libfaxutil7_0_3@7.0.3-5.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "hylafax+-0:7.0.3-5.1.x86_64",
                "product": {
                  "name": "hylafax+-0:7.0.3-5.1.x86_64",
                  "product_id": "hylafax+-0:7.0.3-5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+@7.0.3-5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hylafax+-client-0:7.0.3-5.1.x86_64",
                "product": {
                  "name": "hylafax+-client-0:7.0.3-5.1.x86_64",
                  "product_id": "hylafax+-client-0:7.0.3-5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/hylafax+-client@7.0.3-5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libfaxutil7_0_3-0:7.0.3-5.1.x86_64",
                "product": {
                  "name": "libfaxutil7_0_3-0:7.0.3-5.1.x86_64",
                  "product_id": "libfaxutil7_0_3-0:7.0.3-5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libfaxutil7_0_3@7.0.3-5.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-0:7.0.3-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64"
        },
        "product_reference": "hylafax+-0:7.0.3-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-0:7.0.3-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le"
        },
        "product_reference": "hylafax+-0:7.0.3-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-0:7.0.3-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x"
        },
        "product_reference": "hylafax+-0:7.0.3-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-0:7.0.3-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64"
        },
        "product_reference": "hylafax+-0:7.0.3-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-client-0:7.0.3-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64"
        },
        "product_reference": "hylafax+-client-0:7.0.3-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-client-0:7.0.3-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le"
        },
        "product_reference": "hylafax+-client-0:7.0.3-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-client-0:7.0.3-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x"
        },
        "product_reference": "hylafax+-client-0:7.0.3-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hylafax+-client-0:7.0.3-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64"
        },
        "product_reference": "hylafax+-client-0:7.0.3-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfaxutil7_0_3-0:7.0.3-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64"
        },
        "product_reference": "libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfaxutil7_0_3-0:7.0.3-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le"
        },
        "product_reference": "libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfaxutil7_0_3-0:7.0.3-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x"
        },
        "product_reference": "libfaxutil7_0_3-0:7.0.3-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfaxutil7_0_3-0:7.0.3-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
        },
        "product_reference": "libfaxutil7_0_3-0:7.0.3-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-17141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-17141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-17141",
          "url": "https://www.suse.com/security/cve/CVE-2018-17141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1109084 for CVE-2018-17141",
          "url": "https://bugzilla.suse.com/1109084"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2018-17141"
    },
    {
      "cve": "CVE-2020-15396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-15396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-15396",
          "url": "https://www.suse.com/security/cve/CVE-2020-15396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173521 for CVE-2020-15396",
          "url": "https://bugzilla.suse.com/1173521"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-15396"
    },
    {
      "cve": "CVE-2020-15397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-15397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-15397",
          "url": "https://www.suse.com/security/cve/CVE-2020-15397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173519 for CVE-2020-15397",
          "url": "https://bugzilla.suse.com/1173519"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-15397"
    },
    {
      "cve": "CVE-2020-8024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
          "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8024",
          "url": "https://www.suse.com/security/cve/CVE-2020-8024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172731 for CVE-2020-8024",
          "url": "https://bugzilla.suse.com/1172731"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:hylafax+-client-0:7.0.3-5.1.x86_64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.aarch64",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.ppc64le",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.s390x",
            "openSUSE Tumbleweed:libfaxutil7_0_3-0:7.0.3-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-8024"
    }
  ]
}

CVE-2018-17141 (GCVE-0-2018-17141)

Vulnerability from cvelistv5 – Published: 2018-09-21 17:00 – Updated: 2024-08-05 10:39

Summary

HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

6 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2018/Sep/49	mailing-listx_refsource_BUGTRAQ
http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac…	x_refsource_CONFIRM
https://www.x41-dsec.de/lab/advisories/x41-2018-0…	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4298	vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2018/09/20/1	mailing-listx_refsource_MLIST

Date Public

2018-09-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:39:59.554Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180922 [SECURITY] [DLA 1515-1] hylafax security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00026.html"
          },
          {
            "name": "20180919 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2018/Sep/49"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027be"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/"
          },
          {
            "name": "DSA-4298",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4298"
          },
          {
            "name": "[oss-security] 20180920 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2018/09/20/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-23T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180922 [SECURITY] [DLA 1515-1] hylafax security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00026.html"
        },
        {
          "name": "20180919 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2018/Sep/49"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027be"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/"
        },
        {
          "name": "DSA-4298",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4298"
        },
        {
          "name": "[oss-security] 20180920 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2018/09/20/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-17141",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180922 [SECURITY] [DLA 1515-1] hylafax security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00026.html"
            },
            {
              "name": "20180919 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2018/Sep/49"
            },
            {
              "name": "http://git.hylafax.org/HylaFAX?a=commit;h=c6cac8d8cd0dbe313689ba77023e12bc5b3027be",
              "refsource": "CONFIRM",
              "url": "http://git.hylafax.org/HylaFAX?a=commit;h=c6cac8d8cd0dbe313689ba77023e12bc5b3027be"
            },
            {
              "name": "https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/",
              "refsource": "MISC",
              "url": "https://www.x41-dsec.de/lab/advisories/x41-2018-008-hylafax/"
            },
            {
              "name": "DSA-4298",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4298"
            },
            {
              "name": "[oss-security] 20180920 X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2018/09/20/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-17141",
    "datePublished": "2018-09-21T17:00:00.000Z",
    "dateReserved": "2018-09-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:39:59.554Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-15396 (GCVE-0-2020-15396)

Vulnerability from cvelistv5 – Published: 2020-06-30 11:17 – Updated: 2024-08-04 13:15

Summary

In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

9 references

URL	Tags
https://sourceforge.net/p/hylafax/HylaFAX+/2534/	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1173521	x_refsource_MISC
https://security.gentoo.org/glsa/202007-06	vendor-advisoryx_refsource_GENTOO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:15:20.704Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173521"
          },
          {
            "name": "GLSA-202007-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-06"
          },
          {
            "name": "FEDORA-2020-8aa8793d25",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
          },
          {
            "name": "FEDORA-2020-01eb48bcce",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
          },
          {
            "name": "openSUSE-SU-2020:1209",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2020:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2020:1231",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
          },
          {
            "name": "openSUSE-SU-2020:1438",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-18T18:06:29.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173521"
        },
        {
          "name": "GLSA-202007-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-06"
        },
        {
          "name": "FEDORA-2020-8aa8793d25",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
        },
        {
          "name": "FEDORA-2020-01eb48bcce",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
        },
        {
          "name": "openSUSE-SU-2020:1209",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2020:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2020:1231",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
        },
        {
          "name": "openSUSE-SU-2020:1438",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-15396",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/",
              "refsource": "MISC",
              "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1173521",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173521"
            },
            {
              "name": "GLSA-202007-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-06"
            },
            {
              "name": "FEDORA-2020-8aa8793d25",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
            },
            {
              "name": "FEDORA-2020-01eb48bcce",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
            },
            {
              "name": "openSUSE-SU-2020:1209",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
            },
            {
              "name": "openSUSE-SU-2020:1210",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2020:1231",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
            },
            {
              "name": "openSUSE-SU-2020:1438",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-15396",
    "datePublished": "2020-06-30T11:17:21.000Z",
    "dateReserved": "2020-06-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T13:15:20.704Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-15397 (GCVE-0-2020-15397)

Vulnerability from cvelistv5 – Published: 2020-06-30 11:17 – Updated: 2024-08-04 13:15

Summary

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

9 references

URL	Tags
https://sourceforge.net/p/hylafax/HylaFAX+/2534/	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1173519	x_refsource_MISC
https://security.gentoo.org/glsa/202007-06	vendor-advisoryx_refsource_GENTOO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:15:20.494Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173519"
          },
          {
            "name": "GLSA-202007-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-06"
          },
          {
            "name": "FEDORA-2020-8aa8793d25",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
          },
          {
            "name": "FEDORA-2020-01eb48bcce",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
          },
          {
            "name": "openSUSE-SU-2020:1209",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2020:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2020:1231",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
          },
          {
            "name": "openSUSE-SU-2020:1438",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-18T18:06:28.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173519"
        },
        {
          "name": "GLSA-202007-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-06"
        },
        {
          "name": "FEDORA-2020-8aa8793d25",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
        },
        {
          "name": "FEDORA-2020-01eb48bcce",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
        },
        {
          "name": "openSUSE-SU-2020:1209",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2020:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2020:1231",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
        },
        {
          "name": "openSUSE-SU-2020:1438",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-15397",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/",
              "refsource": "MISC",
              "url": "https://sourceforge.net/p/hylafax/HylaFAX+/2534/"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1173519",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1173519"
            },
            {
              "name": "GLSA-202007-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-06"
            },
            {
              "name": "FEDORA-2020-8aa8793d25",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"
            },
            {
              "name": "FEDORA-2020-01eb48bcce",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"
            },
            {
              "name": "openSUSE-SU-2020:1209",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html"
            },
            {
              "name": "openSUSE-SU-2020:1210",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2020:1231",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
            },
            {
              "name": "openSUSE-SU-2020:1438",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-15397",
    "datePublished": "2020-06-30T11:17:37.000Z",
    "dateReserved": "2020-06-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T13:15:20.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8024 (GCVE-0-2020-8024)

Vulnerability from cvelistv5 – Published: 2020-06-29 07:45 – Updated: 2024-09-17 01:21

Title

Problematic permissions in hylafax+ packaging allow escalation from uucp to other users

Summary

A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-276 - Incorrect Default Permissions

Assigner

suse mitre root Scorecard

References

2 references

URL	Tags
https://bugzilla.suse.com/show_bug.cgi?id=1172731	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Impacted products

3 products

Vendor	Product	Version
openSUSE	openSUSE Leap 15.2	Affected: hylafax+ , < 7.0.2-lp152.2.1 (custom)
openSUSE	openSUSE Leap 15.1	Affected: hylafax+ , ≤ 5.6.1-lp151.3.7 (custom)
openSUSE	openSUSE Factory	Affected: hylafax+ , < 7.0.2-2.1 (custom)

Date Public

2020-06-15 00:00

Credits

Matthias Gerstner

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:48:25.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1172731"
          },
          {
            "name": "openSUSE-SU-2020:0958",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "openSUSE Leap 15.2",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThan": "7.0.2-lp152.2.1",
              "status": "affected",
              "version": "hylafax+",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "openSUSE Leap 15.1",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThanOrEqual": "5.6.1-lp151.3.7",
              "status": "affected",
              "version": "hylafax+",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "openSUSE Factory",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThan": "7.0.2-2.1",
              "status": "affected",
              "version": "hylafax+",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Matthias Gerstner"
        }
      ],
      "datePublic": "2020-06-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276: Incorrect Default Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-14T11:06:15.000Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1172731"
        },
        {
          "name": "openSUSE-SU-2020:0958",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html"
        }
      ],
      "source": {
        "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1172731",
        "defect": [
          "1172731"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Problematic permissions in hylafax+ packaging allow escalation from uucp to other users",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@suse.com",
          "DATE_PUBLIC": "2020-06-15T00:00:00.000Z",
          "ID": "CVE-2020-8024",
          "STATE": "PUBLIC",
          "TITLE": "Problematic permissions in hylafax+ packaging allow escalation from uucp to other users"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "openSUSE Leap 15.2",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "hylafax+",
                            "version_value": "7.0.2-lp152.2.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "openSUSE Leap 15.1",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "hylafax+",
                            "version_value": "5.6.1-lp151.3.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "openSUSE Factory",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "hylafax+",
                            "version_value": "7.0.2-2.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "openSUSE"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Matthias Gerstner"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-276: Incorrect Default Permissions"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1172731",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1172731"
            },
            {
              "name": "openSUSE-SU-2020:0958",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html"
            }
          ]
        },
        "source": {
          "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1172731",
          "defect": [
            "1172731"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2020-8024",
    "datePublished": "2020-06-29T07:45:17.539Z",
    "dateReserved": "2020-01-27T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:21:22.130Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2024:10852-1

CVE-2018-17141 (GCVE-0-2018-17141)

CVE-2020-15396 (GCVE-0-2020-15396)

CVE-2020-15397 (GCVE-0-2020-15397)

CVE-2020-8024 (GCVE-0-2020-8024)

Tags

Sightings

Nomenclature

Related by attack behaviour