Lucene search

K
rosalinuxROSA LABROSA-SA-2021-2004
HistoryJul 02, 2021 - 6:21 p.m.

Advisory ROSA-SA-2021-2004

2021-07-0218:21:37
ROSA LAB
abf.rosalinux.ru
7

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

Software: zlib 1.2.7
OS: Cobalt 7.9

CVE-ID: CVE-2013-0296
CVE-Crit: HIGH
CVE-DESC: race condition in pigz before 2.2.5 uses permissions derived from umask when compressing a file before setting that file’s permissions to match those of the source file, which may allow local users to bypass implied access permissions during compression.
CVE-STATUS: default
CVE-REV: default

OSVersionArchitecturePackageVersionFilename
Cobaltanynoarchzlib< 1.2.7UNKNOWN

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%