ALINUX2-SA-2020%3A0146

ALINUX2-SA-2020%3A0146 PUBLISHED CVSS 6.599999904632568 MEDIUM

Record from alibaba-cloud · Published October 11, 2020

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-12450: file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CVE-2019-14822: A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.

Risk scores

CVSS 3.0

6.599999904632568

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected products

Vendor	Product	Versions
Alibaba Cloud	ibus
Alibaba Cloud	glib2

Timeline

Oct 11, 2020 CVE Published
Oct 11, 2020 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALINUX2-SA-2020%3A0146
vulnetix vdb fixes ALINUX2-SA-2020%3A0146

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALINUX2-SA-2020%253A0146/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →