PatchTheCVExfsdump vulnerabilities and fixes
Recent CVEs affecting xfsdump, with upgrade or downgrade steps. 2 tracked.
xfsdump has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-05-14. Highest priority: CVE-2003-0173 (score 36/100).
- CVE-2007-2654 MEDIUM 4.4 MITIGATE DOWNGRADE xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to r
- CVE-2003-0173 HIGH 7.2 DOWNGRADE MITIGATE xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privi
FAQ
How do I fix xfsdump vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xfsdump being exploited right now?
None of the tracked xfsdump CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xfsdump CVE should I patch first?
CVE-2003-0173 currently ranks highest (36/100): xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privi.