CVE catalog
CVE-2020-8903
UBUNTU-CVE-2020-8903
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.32% · Oct 25, 2026
This update for google-compute-engine fixes the following issues: - Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258). - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | google-compute-engine | linux enterprise module for public cloud 12 | 20190801-54.1 | fixed |
| Opensuse | google-compute-engine | leap 15.2 | 20190801-lp152.5.4.1 | fixed |
| Suse | google-compute-engine | linux enterprise module for public cloud 15 sp1 | 20190801-4.38.1 | fixed |
| Suse | google-compute-engine | linux enterprise module for public cloud 15 sp2 | 20190801-4.38.1 | fixed |
| Opensuse | google-compute-engine | leap 15.1 | 20190801-lp151.2.25.1 | fixed |
| Ubuntu | gce-compute-image-packages | 14.04 | 20160930-0ubuntu3~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20160930-0ubuntu3~14.04.1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20160930-0ubuntu3~14.04.2 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20160930-0ubuntu6~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20170426-0ubuntu2~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20170523-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20170622-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20170718-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20171019+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20171025+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20171129+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20180129+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20180510+dfsg1-0ubuntu3~14.04.3 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20180905+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20180905+dfsg1-0ubuntu1~14.04.1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20190124+dfsg1-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 14.04 | 20190315-0ubuntu1~14.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20160930-0ubuntu3~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20160930-0ubuntu5~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20160930-0ubuntu6~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20170426-0ubuntu2~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20170523-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20170622-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20170718-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20171019+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20171025+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20171129+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20180129+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20180510+dfsg1-0ubuntu3~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20180510+dfsg1-0ubuntu3~16.04.1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20180905+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20180905+dfsg1-0ubuntu1~16.04.1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20190124+dfsg1-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20190522-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20190801-0ubuntu1~16.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 16.04 | 20190801-0ubuntu1~16.04.1 | fixed |
| Ubuntu | gce-compute-image-packages | 18.04 | 20171006+dfsg1-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20171019+dfsg1-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20171025+dfsg1-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20171129+dfsg1-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180129+dfsg1-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180129+dfsg1-0ubuntu2 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180129+dfsg1-0ubuntu3 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180510+dfsg1-0ubuntu4~18.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180510+dfsg1-0ubuntu4~18.04.1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20180905+dfsg1-0ubuntu1~18.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20190124+dfsg1-0ubuntu1~18.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20190522-0ubuntu1~18.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20190801-0ubuntu1~18.04.0 | vulnerable |
| Ubuntu | gce-compute-image-packages | 18.04 | 20190801-0ubuntu1~18.04.1 | fixed |
| Ubuntu | gce-compute-image-packages | 20.04 | 20190801-0ubuntu1 | vulnerable |
| Ubuntu | gce-compute-image-packages | 20.04 | 20190801-0ubuntu2 | vulnerable |
| Ubuntu | gce-compute-image-packages | 20.04 | 20190801-0ubuntu3 | vulnerable |
| Ubuntu | gce-compute-image-packages | 20.04 | 20190801-0ubuntu4 | vulnerable |
| Ubuntu | gce-compute-image-packages | 20.04 | 20190801-0ubuntu4.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | google-compute-engine | rpm | linux enterprise module for public cloud 12 | 20190801-54.1 | Not reported | SUSE-SU-2020:2200-1 | Not reported |
| Opensuse | google-compute-engine | rpm | leap 15.2 | 20190801-lp152.5.4.1 | Not reported | OPENSUSE-SU-2020:1014-1 | Not reported |
| Suse | google-compute-engine | rpm | linux enterprise module for public cloud 15 sp1 | 20190801-4.38.1 | Not reported | SUSE-SU-2020:1934-1 | Not reported |
| Suse | google-compute-engine | rpm | linux enterprise module for public cloud 15 sp2 | 20190801-4.38.1 | Not reported | SUSE-SU-2020:1934-1 | Not reported |
| Opensuse | google-compute-engine | rpm | leap 15.1 | 20190801-lp151.2.25.1 | Not reported | OPENSUSE-SU-2020:0996-1 | Not reported |
| Ubuntu | gce-compute-image-packages | deb | 16.04 | 20190801-0ubuntu1~16.04.1 | Not reported | UBUNTU-CVE-2020-8903 | Not reported |
| Ubuntu | gce-compute-image-packages | deb | 18.04 | 20190801-0ubuntu1~18.04.1 | Not reported | UBUNTU-CVE-2020-8903 | Not reported |
| Ubuntu | gce-compute-image-packages | deb | 20.04 | 20190801-0ubuntu4.1 | Not reported | UBUNTU-CVE-2020-8903 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1934-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1934-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:2200-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2020-8903]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0996-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:1014-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]