Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2020-0354
HistoryAug 30, 2020 - 7:53 p.m.

Updated fossil package fixes security vulnerability

2020-08-3019:53:07
Gentoo Foundation
advisories.mageia.org
19
fossil
2.10.2
2.11.x
2.11.2
2.12.x
2.12.1
remote authenticated users
arbitrary code
cve-2020-24614
check-in privileges
repository
security issues
unix

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.011

Percentile

84.6%

JSON

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository (CVE-2020-24614). The fossil package has been updated to version 2.10.2, containing fixes for this issue, fixes for other bugs and security issues, and additional enhancements. See the changes list for details.

OSVersionArchitecturePackageVersionFilename
Mageia7noarchfossil< 2.10.2-1fossil-2.10.2-1.mga7

Related

debiancve 1
fedora 2
openvas 4
ubuntucve 1
nessus 4
gentoo 1
prion 1
suse 2
cve 1
nvd 1
cvelist 1
osv 1
debiancve
debiancve
CVE-2020-24614
2020-08-25 14:15:16
fedora
fedora
[SECURITY] Fedora 32 Update: fossil-2.12.1-1.fc32
2020-12-05 01:16:26
[SECURITY] Fedora 33 Update: fossil-2.12.1-1.fc33
2020-12-05 01:40:20
openvas
openvas
Fedora: Security Advisory for fossil (FEDORA-2020-50be892d25)
2020-12-05 00:00:00
Mageia: Security Advisory (MGASA-2020-0354)
2022-01-28 00:00:00
openSUSE: Security Advisory for fossil (openSUSE-SU-2020:1478-1)
2020-09-21 00:00:00
ubuntucve
ubuntucve
CVE-2020-24614
2020-08-25 00:00:00
nessus
nessus
Fedora 33 : fossil (2020-ac6cf99f87)
2020-12-07 00:00:00
openSUSE Security Update : fossil (openSUSE-2020-1478)
2020-09-21 00:00:00
Fedora 32 : fossil (2020-50be892d25)
2020-12-07 00:00:00
gentoo
gentoo
Fossil: Multiple vulnerabilities
2020-11-03 00:00:00
prion
prion
Design/Logic Flaw
2020-08-25 14:15:00
suse
suse
Security update for fossil (important)
2020-09-20 00:00:00
Security update for fossil (important)
2021-07-21 00:00:00
cve
cve
CVE-2020-24614
2020-08-25 14:15:16
nvd
nvd
CVE-2020-24614
2020-08-25 14:15:16
cvelist
cvelist
CVE-2020-24614
2020-08-25 13:36:43
osv
osv
fossil-2.16-1.2 on GA media
2024-06-15 00:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.011

Percentile

84.6%

JSON
Related for MGASA-2020-0354
debiancve1fedora2openvas4ubuntucve1nessus4gentoo1prion1suse2cve1nvd1cvelist1osv1