PT-2018-11561 · Linux Mint+2 · Cinnamon+2

Mgerstner · Published 2018-07-02 · Updated 2021-03-15 · CVE-2018-13054

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cinnamon versions 1.9.2 through 3.8.6

Description An issue was discovered where the cinnamon-settings-users.py GUI, running as root, allows configuration of other users' icon files. This can lead to arbitrary file overwrites if an unprivileged user prepares a symlink to a target location. The icon files are written to the respective user's $HOME/.face location.

Recommendations For Cinnamon versions 1.9.2 through 3.8.6, consider restricting access to the cinnamon-settings-users.py GUI to prevent unprivileged users from preparing symlinks that could lead to arbitrary file overwrites. As a temporary workaround, consider disabling the on face browse menuitem activated and on face menuitem activated functions until a patch is available.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2018-13054

DLA-1420-1

MGASA-2019-0063

OPENSUSE-SU-2018_2121-1

OPENSUSE-SU-2018_2125-1

USN-4844-1

Affected Products

Cinnamon

Suse

Ubuntu

References · 19

• https://github.com/linuxmint/Cinnamon/pull/7683 · Patch
• https://cve.org/CVERecord?id=CVE-2018-13054 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=1083067 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-13054 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/XSADMZDE26IBCLBJOASR5ZX4E2OKKPVD · Vendor Advisory
• https://osv.dev/vulnerability/USN-4844-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-13054 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1420-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0063.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13054 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-13054 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-13054 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13054 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4844-1 · Vendor Advisory