Lucene search
Veracode Vulnerability DatabaseVERACODE:27162HistorySep 21, 2020 - 6:39 a.m.
Wrong Access Permission
2020-09-2106:39:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
linux kernel
access permission
filesystem
acl support
umask
cid-22cf8419f131
software
EPSS
0.001
Percentile
18.9%
Linux kernel is using wrong access permission.It can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.
References
lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=962254
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=22cf8419f1319ff87ec759d0ebdff4cbafaee832
security.netapp.com/advisory/ntap-20200904-0003/
usn.ubuntu.com/4465-1/
usn.ubuntu.com/4483-1/
usn.ubuntu.com/4485-1/
www.oracle.com/security-alerts/cpuApr2021.html
www.starwindsoftware.com/security/sw-20210325-0004/
Related
debiancve
debiancve
CVE-2020-24394
2020-08-19 13:15:10
redhatcve
redhatcve
CVE-2020-24394
2020-08-19 15:09:51
f5
f5
K04553557 : Linux nfsd kernel vulnerability CVE-2020-24394
2021-03-02 00:00:00
prion
prion
Code injection
2020-08-19 13:15:00
nvd
nvd
CVE-2020-24394
2020-08-19 13:15:10
cbl_mariner
cbl_mariner
CVE-2020-24394 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
ubuntucve
ubuntucve
CVE-2020-24394
2020-08-19 00:00:00
cvelist
cvelist
CVE-2020-24394
2020-08-19 00:00:00
cve
cve
CVE-2020-24394
2020-08-19 13:15:10
nessus
nessus
RHEL 7 : kernel (RHSA-2021:0760)
2021-03-09 00:00:00
RHEL 7 : kernel (RHSA-2021:0526)
2021-02-16 00:00:00
Ubuntu 18.04 LTS : linux kernel vulnerabilities (USN-4465-1)
2020-08-19 00:00:00
redhat
redhat
(RHSA-2021:0760) Moderate: kernel security and bug fix update
2021-03-09 08:47:49
(RHSA-2021:0526) Moderate: kernel security and bug fix update
2021-02-16 07:11:07
(RHSA-2021:0878) Important: kernel security, bug fix, and enhancement update
2021-03-16 13:07:24
openvas
openvas
Ubuntu: Security Advisory (USN-4465-1)
2020-08-19 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-2303)
2020-10-30 00:00:00
openSUSE: Security Advisory for the (openSUSE-SU-2020:1325-1)
2020-09-03 00:00:00
ubuntu
ubuntu
linux kernel vulnerabilities
2020-08-23 00:00:00
Linux kernel vulnerabilities
2020-09-03 00:00:00
Linux kernel vulnerabilities
2020-09-03 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2020-09-02 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-09-14 00:00:00
kernel security and bug fix update
2020-12-16 00:00:00
Unbreakable Enterprise kernel security update
2020-09-11 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0127
2020-08-18 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0127
2020-08-18 00:00:00
ibm
ibm
centos
centos
bpftool, kernel, perf, python security update
2020-12-21 20:45:16
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57
osv
osv
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00