PT-2019-18479 · Keybase · Keybase

0Xcccc + 4 · Publicado 2019-01-31 · Atualizado 2020-08-24 · CVE-2019-7249

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Keybase versions prior to 2.12.6

Description The issue in Keybase allows one user of the system without root access to tamper with another's installs due to time-to-check-time-to-use bugs in the move RPC to the Helper.

Recommendations For versions prior to 2.12.6, update to version 2.12.6 or later to resolve the issue.

Exploit

Correção

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

CVE-2019-7249

Produtos afetados

Keybase

Referências · 5

• 🔥 https://hackerone.com/reports/471739 · Exploit
• 🔥 https://keybase.io/docs/secadv/kb004 · Exploit
• https://osv.dev/vulnerability/CVE-2019-7249 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7249 · Nota de Segurança
• http://securityfocus.com/bid/106824 · Nota