Published: 14/08/2018 Updated: 07/11/2023

CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8

CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8

VMScore: 490

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libcgroup project libcgroup
debian debian linux 8.0
fedoraproject fedora 28

Synopsis Moderate: libcgroup security update Type/Severity Security Advisory: Moderate Topic An update for libcgroup is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score ...

Debian Bug report logs - #906308 CVE-2018-14348 Package: src:libcgroup; Maintainer for src:libcgroup is Debian QA Group <packages@qadebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 16 Aug 2018 21:09:02 UTC Severity: grave Tags: security Fixed in versions libcgroup/041-81, libcgroup/041-8+ ...

libcgroup up to and including 041 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information(CVE-2018-14348) ...

libcgroup up to and including 041 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information ...

CWE-200 https://sourceforge.net/p/libcg/libcg/ci/0d88b73d189ea3440ccaab00418d6469f76fa590/https://bugzilla.suse.com/show_bug.cgi?id=1100365 http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00023.html https://lists.debian.org/debian-lts-announce/2018/08/msg00019.html https://access.redhat.com/errata/RHSA-2019:2047 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3VH333EONOEEGKOLHHFXCJYHCYMHJ4KK/https://access.redhat.com/errata/RHSA-2019:2047 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2019-1336.html https://access.redhat.com/security/cve/cve-2018-14348

CVE-2018-14348

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect