CVE-2020-8024: Problematic permissions in hylafax+ packaging allow escalation from uucp to other users
A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8024?
CVE-2020-8024 has a medium severity rating, allowing local attackers to escalate privileges.
How do I fix CVE-2020-8024?
To fix CVE-2020-8024, upgrade hylafax+ to version 7.0.2-lp152.2.1 or newer.
Which versions of hylafax+ are affected by CVE-2020-8024?
CVE-2020-8024 affects hylafax+ versions prior to 7.0.2-lp152.2.1 on openSUSE.
Can a local user exploit CVE-2020-8024?
Yes, a local user can exploit CVE-2020-8024 to escalate their privileges on the system.
In which openSUSE versions is CVE-2020-8024 found?
CVE-2020-8024 is found in openSUSE Leap 15.2 and 15.1 with vulnerable hylafax+ packages.