CVE-2020-36394
High
Description
pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.
SeverityHigh
CVSS7.0
Exploit probability—
ProductPam Setquota
PublishedJun 22, 2021
First seenJun 22, 2021
How to fix
Update
- pam_setquota_project pam_setquota2020-05-29 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pam_setquota_project pam_setquota | v < 2020-05-29 | 2020-05-29 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.