PatchTheCVElogcheck vulnerabilities and fixes
Recent CVEs affecting logcheck, with upgrade or downgrade steps. 2 tracked.
logcheck has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-09-20. Highest priority: CVE-2017-20148 (score 66/100).
- CVE-2017-20148 CRITICAL 9.8 UPGRADE In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root pr
- CVE-2004-0404 LOW 1.2 UPGRADE logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary dire
FAQ
How do I fix logcheck vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is logcheck being exploited right now?
None of the tracked logcheck CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which logcheck CVE should I patch first?
CVE-2017-20148 currently ranks highest (66/100): In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root pr.