PT-2019-12939 · Opensuse+4 · Libqb+4

Topimiettinen · Published 2019-04-03 · Updated 2021-07-03 · CVE-2019-12779

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions libqb versions prior to 1.0.5

Description The issue allows local users to overwrite arbitrary files via a symlink attack. This is because libqb uses predictable filenames under /dev/shm and /tmp without O EXCL.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to /dev/shm and /tmp to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2019-1914

CESA-2019_3610

CESA-2020_1189

CVE-2019-12779

MGASA-2020-0048

OESA-2021-1141

OPENSUSE-SU-2019:1718-1

OPENSUSE-SU-2019:1752-1

OPENSUSE-SU-2019:1891-1

OPENSUSE-SU-2019_1718-1

OPENSUSE-SU-2019_1752-1

OPENSUSE-SU-2024:10974-1

RHSA-2019:3610

RHSA-2019_3610

RHSA-2020:1189

RHSA-2020_1189

SUSE-SU-2019:1791-1

SUSE-SU-2019:1806-1

SUSE-SU-2019:1812-1

SUSE-SU-2019_1791-1

SUSE-SU-2019_1806-1

SUSE-SU-2019_1812-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Libqb

References · 43

• 🔥 https://github.com/ClusterLabs/libqb/issues/338 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1695948 · Exploit
• https://osv.dev/vulnerability/CVE-2019-12779 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-12779 · Security Note
• https://access.redhat.com/errata/RHSA-2019:3610 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12779 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0048 · Vendor Advisory
• https://security.gentoo.org/glsa/202107-03 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1812-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12779 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:1806-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1791-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-3610.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00027.html · Vendor Advisory