pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attackers home directory is a FUSE filesystem mounted under /home.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pam_setquota | Pam_setquota_project | * | 2020-05-29 (excluding) |
Pam | Ubuntu | groovy | * |
Pam | Ubuntu | hirsute | * |
Pam | Ubuntu | impish | * |
Pam | Ubuntu | trusty | * |