CVE-2018-20871
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on...
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
- Record
CVE-2018-20871- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-732
- Updated
- 2026-11-02
CVE List No score
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
- Record
CVE-2018-20871- Updated
- 2026-11-02
EUVDEUVD-2018-13409 No score
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
- Record
EUVD-2018-13409- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8mfm-44x4-r4v3
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on...
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
- Record
GHSA-8mfm-44x4-r4v3- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-20871
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
- Record
UBUNTU-CVE-2018-20871- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gridengineUbuntu:16.04:LTS |
All versions, plus listed versions 6.2u5-7.36.2u5-7.4 |
None known |
gridengineUbuntu:18.04:LTS |
All versions, plus listed versions 8.1.9+dfsg-58.1.9+dfsg-7build1 |
None known |
gridengineUbuntu:20.04:LTS |
All versions, plus listed versions 8.1.9+dfsg-9build18.1.9+dfsg-9build2 |
None known |
gridengineUbuntu:22.04:LTS |
All versions, plus listed versions 8.1.9+dfsg-108.1.9+dfsg-10build1 |
None known |
gridengineUbuntu:24.04:LTS |
All versions, plus listed versions 8.1.9+dfsg-118.1.9+dfsg-11build28.1.9+dfsg-11build3 |
None known |
gridengineUbuntu:25.10 |
All versions, plus listed versions 8.1.9+dfsg-128.1.9+dfsg-13.1 |
None known |
gridengineUbuntu:26.10 |
All versions, plus listed versions 8.1.9+dfsg-13.28.1.9+dfsg-13.2build18.1.9+dfsg-13.2ubuntu1 |
None known |
gridengineUbuntu:26.04:LTS |
All versions, plus listed versions 8.1.9+dfsg-13.18.1.9+dfsg-13.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-20871 is a critical vulnerability (CVSS 9.8) in Univa Grid Engine, published July 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.17%, the 82nd percentile. No source names a fixed version.