PT-2019-12865 · London Trust Media · Private Internet Access (Pia) Vpn Client

Rich Mirch · Publicado 2019-07-11 · Atualizado 2020-08-24 · CVE-2019-12575

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access (PIA) VPN Client version v82 for Linux

Description A local, authenticated attacker could exploit this issue to run arbitrary code with elevated privileges. The root runner.64 binary, which is setuid root, executes /opt/pia/ruby/64/ruby, loading several libraries under /tmp/ruby-deploy.old/lib. An unprivileged user can create a malicious library under this path to execute arbitrary code as the root user.

Recommendations For London Trust Media Private Internet Access (PIA) VPN Client version v82 for Linux, consider restricting access to the /tmp/ruby-deploy.old/lib path to prevent malicious library loading until a patch is available. As a temporary workaround, disabling the execution of the root runner.64 binary could mitigate the risk of exploitation.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-12575

Produtos afetados

Private Internet Access (Pia) Vpn Client

Referências · 3

• 🔥 https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12575.txt · Exploit
• https://osv.dev/vulnerability/CVE-2019-12575 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12575 · Nota de Segurança