{"id":"UBUNTU-CVE-2018-20871","details":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","modified":"2026-05-20T16:03:37.671012359Z","published":"2019-07-30T19:15:00Z","upstream":["CVE-2018-20871"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-20871"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2018-20871"}],"affected":[{"package":{"name":"gridengine","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2u5-7.3","6.2u5-7.4"],"ecosystem_specific":{"binaries":[{"binary_version":"6.2u5-7.4","binary_name":"gridengine-client"},{"binary_name":"gridengine-common","binary_version":"6.2u5-7.4"},{"binary_name":"gridengine-drmaa1.0","binary_version":"6.2u5-7.4"},{"binary_name":"gridengine-exec","binary_version":"6.2u5-7.4"},{"binary_name":"gridengine-master","binary_version":"6.2u5-7.4"},{"binary_version":"6.2u5-7.4","binary_name":"gridengine-qmon"},{"binary_name":"libdrmaa-java","binary_version":"6.2u5-7.4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-5","8.1.9+dfsg-7build1"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-7build1"},{"binary_name":"gridengine-common","binary_version":"8.1.9+dfsg-7build1"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-7build1"},{"binary_name":"gridengine-exec","binary_version":"8.1.9+dfsg-7build1"},{"binary_version":"8.1.9+dfsg-7build1","binary_name":"gridengine-master"},{"binary_version":"8.1.9+dfsg-7build1","binary_name":"gridengine-qmon"},{"binary_name":"libdrmaa1.0-java","binary_version":"8.1.9+dfsg-7build1"},{"binary_name":"libdrmaa1.0-ruby","binary_version":"8.1.9+dfsg-7build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-9build1","8.1.9+dfsg-9build2"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-9build2"},{"binary_name":"gridengine-common","binary_version":"8.1.9+dfsg-9build2"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-9build2"},{"binary_name":"gridengine-exec","binary_version":"8.1.9+dfsg-9build2"},{"binary_name":"gridengine-master","binary_version":"8.1.9+dfsg-9build2"},{"binary_version":"8.1.9+dfsg-9build2","binary_name":"gridengine-qmon"},{"binary_name":"libdrmaa1.0-java","binary_version":"8.1.9+dfsg-9build2"},{"binary_name":"libdrmaa1.0-ruby","binary_version":"8.1.9+dfsg-9build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-10","8.1.9+dfsg-10build1"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-10build1"},{"binary_name":"gridengine-common","binary_version":"8.1.9+dfsg-10build1"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-10build1"},{"binary_name":"gridengine-exec","binary_version":"8.1.9+dfsg-10build1"},{"binary_name":"gridengine-master","binary_version":"8.1.9+dfsg-10build1"},{"binary_version":"8.1.9+dfsg-10build1","binary_name":"gridengine-qmon"},{"binary_name":"libdrmaa1.0-java","binary_version":"8.1.9+dfsg-10build1"},{"binary_name":"libdrmaa1.0-ruby","binary_version":"8.1.9+dfsg-10build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-11","8.1.9+dfsg-11build2","8.1.9+dfsg-11build3"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-11build3"},{"binary_version":"8.1.9+dfsg-11build3","binary_name":"gridengine-common"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-11build3"},{"binary_name":"gridengine-exec","binary_version":"8.1.9+dfsg-11build3"},{"binary_name":"gridengine-master","binary_version":"8.1.9+dfsg-11build3"},{"binary_version":"8.1.9+dfsg-11build3","binary_name":"gridengine-qmon"},{"binary_name":"libdrmaa1.0-java","binary_version":"8.1.9+dfsg-11build3"},{"binary_name":"libdrmaa1.0-ruby","binary_version":"8.1.9+dfsg-11build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-12","8.1.9+dfsg-13.1"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-13.1"},{"binary_name":"gridengine-common","binary_version":"8.1.9+dfsg-13.1"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-13.1"},{"binary_version":"8.1.9+dfsg-13.1","binary_name":"gridengine-exec"},{"binary_name":"gridengine-master","binary_version":"8.1.9+dfsg-13.1"},{"binary_version":"8.1.9+dfsg-13.1","binary_name":"gridengine-qmon"},{"binary_version":"8.1.9+dfsg-13.1","binary_name":"libdrmaa1.0-java"},{"binary_name":"libdrmaa1.0-ruby","binary_version":"8.1.9+dfsg-13.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}},{"package":{"name":"gridengine","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/gridengine?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-13.1","8.1.9+dfsg-13.2"],"ecosystem_specific":{"binaries":[{"binary_name":"gridengine-client","binary_version":"8.1.9+dfsg-13.2"},{"binary_name":"gridengine-common","binary_version":"8.1.9+dfsg-13.2"},{"binary_name":"gridengine-drmaa1.0","binary_version":"8.1.9+dfsg-13.2"},{"binary_name":"gridengine-exec","binary_version":"8.1.9+dfsg-13.2"},{"binary_name":"gridengine-master","binary_version":"8.1.9+dfsg-13.2"},{"binary_version":"8.1.9+dfsg-13.2","binary_name":"gridengine-qmon"},{"binary_version":"8.1.9+dfsg-13.2","binary_name":"libdrmaa1.0-java"},{"binary_version":"8.1.9+dfsg-13.2","binary_name":"libdrmaa1.0-ruby"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-20871.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}