CVE-2020-15396
Fixed in a distro release EPSS <1%
In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root.
Products: hylafax+_project hylafax+, ifax hylafax_enterprise, fedoraproject fedora, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | hylafaxplus | 7.0.0-r4 |
| Alpine 3.11 | hylafaxplus | 7.0.1-r2 |
| Alpine 3.12 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.13 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.14 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.15 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.16 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.17 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.18 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.19 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.20 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.9 | hylafaxplus | 7.0.0-r1 |
| Debian 12 | hylafax | 3:6.0.7-3.1 |
| Debian 13 | hylafax | 3:6.0.7-3.1 |
| Debian 14 | hylafax | 3:6.0.7-3.1 |
| SUSE Package Hub 15 SP1 | hylafax+ | 7.0.3-bp151.6.4.1 |
| SUSE Package Hub 15 SP2 | hylafax+ | 7.0.3-bp152.3.4.1 |
| Ubuntu 16.04 LTS | hylafax | no fix |
| Ubuntu 18.04 LTS | hylafax | no fix |
| Ubuntu 20.04 LTS | hylafax | no fix |
| Ubuntu 22.04 LTS | hylafax | no fix |
| Ubuntu 24.04 LTS | hylafax | no fix |
| Ubuntu 25.10 | hylafax | no fix |
| Ubuntu 26.04 LTS | hylafax | no fix |
| Ubuntu 26.10 | hylafax | no fix |
| openSUSE Leap 15.1 | hylafax+ | 7.0.3-lp151.4.6.1 |
| openSUSE Leap 15.2 | hylafax+ | 7.0.3-lp152.3.6.1 |
| openSUSE Tumbleweed | hylafax+ | 7.0.3-5.1 |