{"id":"CVE-2020-36394","aliases":["EUVD-2020-23925","GHSA-m5q3-rr63-cf6f","UBUNTU-CVE-2020-36394"],"status":"published","title":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers...","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00346,"percentile":0.28495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-06-22T20:43:26Z","modified":"2026-06-17T03:15:23Z","products":[{"vendor":"pam_setquota_project","product":"pam_setquota"}],"references":[{"url":"https://seclists.org/oss-sec/2020/q2/169","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36394"},{"url":"https://github.com/advisories/GHSA-m5q3-rr63-cf6f"},{"url":"https://ubuntu.com/security/CVE-2020-36394","tags":["report"]},{"url":"https://github.com/linux-pam/linux-pam/commit/27ded8954a1235bb65ffc9c730ae5a50b1dfed61","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36394","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-36394","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","status":"published","published":"2021-06-22T20:43:26Z","modified":"2024-08-04T17:23:10.527Z","updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-23925","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","status":"published","published":"2021-06-22T20:43:26Z","modified":"2024-08-04T17:23:10Z","updated_at":"2026-11-03T03:07:03.484914Z"}],"ghsa":[{"id":"GHSA-m5q3-rr63-cf6f","title":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers...","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","status":"published","published":"2022-05-24T19:05:49Z","modified":"2023-01-29T05:08:04Z","updated_at":"2026-11-02T14:46:12.058225Z"}],"nvd":[{"id":"CVE-2020-36394","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","status":"published","published":"2021-06-22T21:15:08.217Z","modified":"2026-06-17T03:15:23.943Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:44.292752Z"}],"osv":[{"id":"UBUNTU-CVE-2020-36394","description":"pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.","status":"withdrawn","published":"2021-06-22T21:15:00Z","modified":"2025-07-16T07:41:37.97313Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.179924Z"}]}}