Home

CVE-2018-14348

Description

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.447

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2018:2142-1(SUSE Linux Enterprise Server 11-SP4 ) libcgroup1-0.41.rc1-7.1.x86_64.rpmLinux
SUSE-SU-2018:2468-1(SUSE Linux Enterprise Desktop 12-SP3 ) libcgroup-debugsource-0.41.rc1-10.9.1.x86_64.rpmLinux
SUSE-SU-2018:2468-1(SUSE Linux Enterprise Server 12-SP3 ) libcgroup-tools-0.41.rc1-10.9.1.x86_64.rpmLinux
SUSE-SU-2018:2468-1(SUSE Linux Enterprise Server 12-SP3 ) libcgroup-tools-debuginfo-0.41.rc1-10.9.1.x86_64.rpmLinux
SUSE-SU-2018:2468-1(SUSE Linux Enterprise Desktop 12-SP3 ) libcgroup1-0.41.rc1-10.9.1.x86_64.rpmLinux
SUSE-SU-2018:2468-1(SUSE Linux Enterprise Desktop 12-SP3 ) libcgroup1-debuginfo-0.41.rc1-10.9.1.x86_64.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-0.41-21.el7.i686.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-0.41-21.el7.x86_64.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-devel-0.41-21.el7.i686.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-devel-0.41-21.el7.x86_64.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-pam-0.41-21.el7.i686.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-pam-0.41-21.el7.x86_64.rpmLinux
(RHSA-2019:2047) libcgroup security update libcgroup-tools-0.41-21.el7.x86_64.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-0.41-21.el7.i686.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-0.41-21.el7.x86_64.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-devel-0.41-21.el7.i686.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-devel-0.41-21.el7.x86_64.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-pam-0.41-21.el7.i686.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-pam-0.41-21.el7.x86_64.rpmLinux
(CESA-2019:2047) libcgroup security update libcgroup-tools-0.41-21.el7.x86_64.rpmLinux
(RHSA-2019:2047)Moderate: security update libcgroup-debuginfo-0.41-21.el7.i686.rpmLinux
(RHSA-2019:2047)Moderate: security update libcgroup-debuginfo-0.41-21.el7.x86_64.rpmLinux
libcgroup Security Update (ALAS-2019-1336) libcgroup-0.41-21.amzn2.i686.rpmLinux
libcgroup Security Update (ALAS-2019-1336) libcgroup-0.41-21.amzn2.x86_64.rpmLinux
libcgroup Security Update (ALAS-2019-1336) libcgroup-pam-0.41-21.amzn2.x86_64.rpmLinux
libcgroup Security Update (ALAS-2019-1336) libcgroup-devel-0.41-21.amzn2.x86_64.rpmLinux
libcgroup Security Update (ALAS-2019-1336) libcgroup-tools-0.41-21.amzn2.x86_64.rpmLinux
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-14348)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234