Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6926.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-6926
Upstream
Published
2020-08-13T17:15:13Z
Modified
2026-04-21T04:38:33.713925Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7
Details

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

References

Affected packages

Azure Linux:2 / trousers

Package

Name
trousers
Purl
pkg:rpm/azure-linux/trousers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.14-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6926.json"