{"id":"CVE-2018-20871","aliases":["EUVD-2018-13409","GHSA-8mfm-44x4-r4v3","UBUNTU-CVE-2018-20871"],"status":"published","title":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on...","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02169,"percentile":0.82395,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2019-07-30T18:30:53Z","modified":"2026-10-17T12:55:00Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2u5-7.3","6.2u5-7.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-5","8.1.9+dfsg-7build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-9build1","8.1.9+dfsg-9build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-10","8.1.9+dfsg-10build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-11","8.1.9+dfsg-11build2","8.1.9+dfsg-11build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-12","8.1.9+dfsg-13.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-13.2","8.1.9+dfsg-13.2build1","8.1.9+dfsg-13.2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gridengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.9+dfsg-13.1","8.1.9+dfsg-13.2"]}],"products":[{"vendor":"univa","product":"grid_engine"}],"references":[{"url":"http://www.univa.com/resources/files/Release_Notes_Univa_Grid_Engine_8.6.6.pdf","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20871"},{"url":"https://github.com/advisories/GHSA-8mfm-44x4-r4v3"},{"url":"https://ubuntu.com/security/CVE-2018-20871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20871","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-20871","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","status":"published","published":"2019-07-30T18:30:53Z","modified":"2024-08-05T12:12:29.715Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-13409","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","status":"published","published":"2019-07-30T18:30:53Z","modified":"2024-08-05T12:12:29Z","updated_at":"2026-11-03T02:39:29.197639Z"}],"ghsa":[{"id":"GHSA-8mfm-44x4-r4v3","title":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on...","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","status":"published","published":"2022-05-24T16:51:42Z","modified":"2024-04-04T01:25:15Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:55:58.413912Z"}],"nvd":[{"id":"CVE-2018-20871","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","status":"published","published":"2019-07-30T19:15:13.157Z","modified":"2026-06-17T01:53:38.357Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:04:59.278647Z"}],"osv":[{"id":"UBUNTU-CVE-2018-20871","description":"In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions (\"other\" write access) occur in certain cases (GE-6890).","status":"published","published":"2019-07-30T19:15:00Z","modified":"2026-10-17T12:55:00.103484399Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:17.91743Z"}]}}