PT-2019-12865 · London Trust Media · Private Internet Access (Pia) Vpn Client
Rich Mirch
·
Published
2019-07-11
·
Updated
2020-08-24
·
CVE-2019-12575
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
London Trust Media Private Internet Access (PIA) VPN Client version v82 for Linux
Description
A local, authenticated attacker could exploit this issue to run arbitrary code with elevated privileges. The
root runner.64 binary, which is setuid root, executes /opt/pia/ruby/64/ruby, loading several libraries under /tmp/ruby-deploy.old/lib. An unprivileged user can create a malicious library under this path to execute arbitrary code as the root user.Recommendations
For London Trust Media Private Internet Access (PIA) VPN Client version v82 for Linux, consider restricting access to the
/tmp/ruby-deploy.old/lib path to prevent malicious library loading until a patch is available. As a temporary workaround, disabling the execution of the root runner.64 binary could mitigate the risk of exploitation.Exploit
Fix
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Private Internet Access (Pia) Vpn Client