Gentoo Linux: CVE-2020-36657: uptimed: Root Privilege Escalation

Gentoo Linux: CVE-2020-36657: uptimed: Root Privilege Escalation

Severity

7

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

01/26/2023

Created

05/05/2023

Added

05/04/2023

Modified

01/28/2025

Description

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there is an unsafe chown -R call.

Solution(s)

• gentoo-linux-upgrade-app-misc-uptimed

References

• https://attackerkb.com/topics/cve-2020-36657
• CVE - 2020-36657
• 202305-14