Trousers Project CVEs and Security Vulnerabilities

CVE-2020-24331

trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat Trousers Project

Products

Fedora Enterprise Linux Trousers

CVE-2020-24330

trousers: fails to drop the root gid privilege when no longer needed

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.