https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 08:19:01 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-19414 cnvd-2021-19414 https://cve.radiocsirt.org/vuln/cnvd-2021-19414 https://cve.radiocsirt.org/vuln/euvd-2026-42069 EUVD-2026-42069 https://cve.radiocsirt.org/vuln/euvd-2026-42069 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13882 <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13882 https://cve.radiocsirt.org/vuln/ghsa-fgc5-qjvv-cffv <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-fgc5-qjvv-cffv https://cve.radiocsirt.org/vuln/gsd-2020-13882 gsd-2020-13882 https://cve.radiocsirt.org/vuln/gsd-2020-13882 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11032-1 <p>lynis-3.0.5-3.2 on GA media</p> <p>lynis-3.0.5-3.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11032-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13882 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: lynis, Ubuntu:18.04:LTS: lynis, Ubuntu:20.04:LTS: lynis</p> <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: lynis, Ubuntu:18.04:LTS: lynis, Ubuntu:20.04:LTS: lynis</p> <p>CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13882