Read the docs
TI-2020-06483 Aliases CVE-2020-8013GHSA-g26j-xpv7-cfwg

permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim

Priority LOW 13CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

Why it matters now

EPSS 0.00317 24th percentileScored 2026-11-07
Fix Fixed SUSE Linux Enterprise Server 12 (SUSE): 2015.09.28.1626-17.27.1SUSE Linux Enterprise Server 15 (SUSE): 20181116-9.23.1+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Linux Enterprise Server 12permissions to before 2015.09.28.1626-17.27.12015.09.28.1626-17.27.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15permissions to before 20181116-9.23.120181116-9.23.1Patch availableCNA
SUSESUSE Linux Enterprise Server 11permissions to before 2013.1.7-0.6.12.12013.1.7-0.6.12.1Patch availableCNA
  • SUSE Linux Enterprise Server 12 VendorSUSE Affected permissions to before 2015.09.28.1626-17.27.1 Fixed in 2015.09.28.1626-17.27.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 VendorSUSE Affected permissions to before 20181116-9.23.1 Fixed in 20181116-9.23.1 Patch available CNA
  • SUSE Linux Enterprise Server 11 VendorSUSE Affected permissions to before 2013.1.7-0.6.12.1 Fixed in 2013.1.7-0.6.12.1 Patch available CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:o:suse:linux_enterprise_server:11:*:*:*:*:*:*:*11VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*12VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:*15VulnerableSUSE
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·SUSE
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE

Remediation

  • Fix · CNA SUSE Linux Enterprise Server 12 (SUSE) Fixed in 2015.09.28.1626-17.27.1
  • Fix · CNA SUSE Linux Enterprise Server 15 (SUSE) Fixed in 20181116-9.23.1
  • Fix · CNA SUSE Linux Enterprise Server 11 (SUSE) Fixed in 2013.1.7-0.6.12.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-8013
  2. 2026-10-03 Alias added: GHSA-g26j-xpv7-cfwg

References

Advisory 2

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-02923 Access control flaw in ProFTPD mod_copy allows arbitrary file access KEVCVSS 3.1CRITICAL 10.0
  • TI-2015-02278 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2013-02212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
See all 475 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences