HIGH 7.8 Microsoft
CVE-2020-24330
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user it fails to drop the root gid privilege when no longer needed.
Microsoft Security Update 2020-Aug: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user it fails to drop the root gid privilege when no longer needed.
Affected Products
- cm1 trousers 0.3.14-6 on CBL Mariner 1.0
- cbl2 trousers 0.3.14-7 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-24330
- https://nvd.nist.gov/vuln/detail/CVE-2020-24330
This high severity vulnerability with a CVSS score of 7.8 was published on 2020-08-11 via Microsoft. Affected: cm1 trousers 0.3.14-6 on CBL Mariner 1.0, cbl2 trousers 0.3.14-7 on CBL Mariner 2.0.
vulnfeed aggregates 9909 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.