Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2020-24330

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

  • Published: Aug 13, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-24330
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
trousers_project / trousers - 0.3.14.x
fedoraproject / fedora 33 33.x