Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-36781 EUVD-2021-23365GHSA-m398-vv9j-2r7f

parsec: dangerous 777 permissions for /run/parsec

Published Jan 14, 2022 · Updated Sep 16, 2024 · Assigned by suse

Description

A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1.

Affected products

VendorProductAffectedFixed
openSUSE Factory parsec – < 0.8.1-1.1 0.8.1-1.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed parsec 0.8.0-3.1 openSUSE-SU-2024:11665-1

Advisories 1

References