Unrated

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within...

CVE-2020-36657 First seen on SecPulse Jan 27, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2020-36657 uptimed

Original description The description as published by the source.

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there is an unsafe chown -R call.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security.gentoo.org
patch bugs.gentoo.org

Key facts

Severity: Unrated
Published: Jan 27, 2023
First seen on SecPulse: Jan 27, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54