CVE-2020-36394

HIGH 7.0CVE-2020-36394 · Published 22/06/2021 · updated 17/06/2026

In short

CVE-2020-36394 is a HIGH (CVSS 7.0) vulnerability affecting pam setquota (pam setquota project).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.4% of all vulnerabilities.
Fix: update to 2020-05-29 or later.

Package	Affected versions	Patched versions
pam setquota pam_setquota_project	`< 2020-05-29`	`2020-05-29`

Description

pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.

References

seclists.org/oss-sec/2020/q2/169 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free