Skip to content
Fencer Intel
low 2.2

CVE-2020-8013 json

permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim

published 6y ago modified 4mo ago also EUVD-2020-28926

cvss
2.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 24%
public exploits
0
none known

Summary

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

Patch / fix

  • SUSE SUSE Linux Enterprise Server 12 2015.09.28.1626-17.27.1
  • SUSE SUSE Linux Enterprise Server 15 20181116-9.23.1
  • SUSE SUSE Linux Enterprise Server 11 2013.1.7-0.6.12.1
  • permissions SLES for SAP 12 SP5, SLES 12 SP5 20170707-6.4.1
  • permissions SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 20180125-3.21.1
  • permissions SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +2 more 20170707-3.21.1
  • permissions SLE Module for Basesystem 15 SP1 20181116-9.23.1
  • permissions SLE Point of Sale 11 SP3, SLES 11 SP4-LTSS 2013.1.7-0.6.12.1
  • permissions SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES 12 SP3-LTSS +8 more 2015.09.28.1626-17.27.1

suse advisories SUSE-SU-2021:2280-1SUSE-SU-2020:1163-1SUSE-RU-2020:0603-1SUSE-SU-2020:0547-1SUSE-RU-2020:14304-1SUSE-SU-2020:14304-1

  • permissions openSUSE Tumbleweed 1550_20210901.1550-29.2
  • permissions openSUSE Leap 15.3 20200127-lp153.24.3.1
  • permissions openSUSE Leap 15.1 20181116-lp151.4.12.1

opensuse advisories openSUSE-SU-2024:11165-1openSUSE-SU-2021:1520-1openSUSE-SU-2020:0302-1

Is CVE-2020-8013 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
NVD 3.1 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
NVD 2.0 1.9 AV:L/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • SUSE SUSE Linux Enterprise Server 12
  • SUSE SUSE Linux Enterprise Server 15
  • SUSE SUSE Linux Enterprise Server 11

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.