VDB

ALINUX2-SA-2019%3A0067

ALINUX2-SA-2019%3A0067 PUBLISHED CVSS 4.400000095367432 MEDIUM

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-14348: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

Risk Scores

CVSS 3.0
4.400000095367432
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersions
Alibaba Cloudlibcgroup

Timeline

  • Oct 9, 2019 CVE Published
  • Oct 9, 2019 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›