CVE-2020-15397
Fixed in a distro release EPSS <1%
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).
Products: hylafax+_project hylafax+, ifax hylafax_enterprise
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | hylafaxplus | 7.0.0-r4 |
| Alpine 3.11 | hylafaxplus | 7.0.1-r2 |
| Alpine 3.12 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.13 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.14 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.15 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.16 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.17 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.18 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.19 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.20 | hylafaxplus | 7.0.2-r2 |
| Alpine 3.9 | hylafaxplus | 7.0.0-r1 |
| SUSE Package Hub 15 SP1 | hylafax+ | 7.0.3-bp151.6.4.1 |
| SUSE Package Hub 15 SP2 | hylafax+ | 7.0.3-bp152.3.4.1 |
| Ubuntu 16.04 LTS | hylafax | no fix |
| Ubuntu 18.04 LTS | hylafax | no fix |
| Ubuntu 20.04 LTS | hylafax | no fix |
| Ubuntu 22.04 LTS | hylafax | no fix |
| Ubuntu 24.04 LTS | hylafax | no fix |
| Ubuntu 25.10 | hylafax | no fix |
| Ubuntu 26.04 LTS | hylafax | no fix |
| Ubuntu 26.10 | hylafax | no fix |
| openSUSE Leap 15.1 | hylafax+ | 7.0.3-lp151.4.6.1 |
| openSUSE Leap 15.2 | hylafax+ | 7.0.3-lp152.3.6.1 |
| openSUSE Tumbleweed | hylafax+ | 7.0.3-5.1 |