PatchTheCVElynis vulnerabilities and fixes
Recent CVEs affecting lynis, with upgrade or downgrade steps. 2 tracked.
lynis has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-06-18. Highest priority: CVE-2019-13033 (score 24/100).
- CVE-2020-13882 MEDIUM 4.2 UPGRADE MITIGATE CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition
- CVE-2019-13033 LOW 3.3 UPGRADE MITIGATE In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data
FAQ
How do I fix lynis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lynis being exploited right now?
None of the tracked lynis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lynis CVE should I patch first?
CVE-2019-13033 currently ranks highest (24/100): In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data .