CVE-2020-15397

2020-06-3012:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.001 Low

EPSS

Percentile

44.8%

JSON

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.10-mainnoarchhylafaxplus< 7.0.0-r4UNKNOWN
Alpine3.11-mainnoarchhylafaxplus< 7.0.1-r2UNKNOWN
Alpine3.12-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.13-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.14-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.15-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.16-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.17-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN
Alpine3.18-mainnoarchhylafaxplus< 7.0.2-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.10-main	noarch	hylafaxplus	< 7.0.0-r4	UNKNOWN
Alpine	3.11-main	noarch	hylafaxplus	< 7.0.1-r2	UNKNOWN
Alpine	3.12-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.13-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.14-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.15-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.16-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.17-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN
Alpine	3.18-main	noarch	hylafaxplus	< 7.0.2-r2	UNKNOWN

Rows per page:

1-10 of 131

0.001 Low

EPSS

Percentile

44.8%

JSON

Related for ALPINE:CVE-2020-15397