Every CVESearch/Get API key

CVE-2012-5638

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...

3.6 LowFix available

CVE-2012-5638 is a low vulnerability (CVSS 3.6) in Ovirt Sanlock, published December 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in sanlock 2.2-2.

What does this mean?
Severity
3.6 LowCVSS 2.0, NVD
Exploit chance
0.34%EPSS, 27th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.2-2sanlock +76 more

Description

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Exploit likelihood

0.34%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sanlock
Debian:12
before 2.2-2
2.2-2
sanlock
Debian:13
before 2.2-2
2.2-2
sanlock
Debian:14
before 2.2-2
2.2-2
sanlock
Red Hat:enterprise_linux:6::hypervisor
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:enterprise_linux:6::hypervisor
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:enterprise_linux:6::hypervisor
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:enterprise_linux:6::hypervisor
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:enterprise_linux:6::hypervisor
before 0:2.3-4.el6_3
0:2.3-4.el6_3
glusterfs
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-debuginfo
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
Show 67 moreShow less
Affected packages
PackageAffectedFixed
glusterfs-devel
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-fuse
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-rdma
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
appliance
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
appliance-base
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
augeas
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-libs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.0-1.el6
0:0.9.0-1.el6
gluster-swift
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-account
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-container
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-doc
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-object
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-proxy
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
glusterfs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-fuse
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-geo-replication
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-rdma
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-server
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
libvirt
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-client
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-lock-sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
rhn-check
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-client-tools
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup-gnome
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.3-4.el6_3
0:2.3-4.el6_3
sos
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:2.2-17.2.el6rhs
0:2.2-17.2.el6rhs
vdsm
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-cli
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debug-plugin
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-gluster
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-faqemu
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-vhostmd
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-reg
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
rhsc
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-backend
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-config
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-dbscripts
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-genericapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-jboss-deps
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-notification-service
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-restapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-setup
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-tools-common
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-userportal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-webadmin-portal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
vdsm
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
glusterfs
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-debuginfo
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-devel
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-fuse
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-rdma
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6

What each source reports

NVD Score used3.6

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
Updated
2026-11-02
EUVDEUVD-2012-5522No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
EUVD-2012-5522
Updated
2026-11-03
GitHub AdvisoriesGHSA-48rw-xq3g-hfw6No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
GHSA-48rw-xq3g-hfw6
Updated
2026-11-02
OSVNo score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
Updated
2026-11-02
OSVDEBIAN-CVE-2012-5638No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
DEBIAN-CVE-2012-5638
Updated
2026-11-02
OSVUBUNTU-CVE-2012-5638No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
UBUNTU-CVE-2012-5638
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 36 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open