PT-2019-13192 · Deepin · Deepin-Clone

Hillwood Yang · Published 2019-07-04 · Updated 2022-04-18 · CVE-2019-13226

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions deepin-clone versions prior to 1.1.3

Description The issue allows an unprivileged user to prepare a symlink at a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() function to temporarily mount a file system as root. By winning a race condition, the attacker can also enter the mount point, thereby preventing a subsequent unmount of the file system.

Recommendations For deepin-clone versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp/.deepin-clone/mount/ directory to prevent an unprivileged user from creating a symlink at the predictable path.

Fix

Race Condition

Link Following

Weakness Enumeration

CWE-362

CWE-59

Related Identifiers

CVE-2019-13226

Affected Products

Deepin-Clone

References · 7

• https://github.com/linuxdeepin/deepin-clone/commit/e079f3e2712b4f8c28e3e63e71ba1a1f90fce1ab · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCHGRJV5CWTMYEE5B5C2FNMCFVP45S7H · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-13226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13226 · Security Note
• http://openwall.com/lists/oss-security/2019/07/04/1 · Note
• https://t.me/cvenotify/171 · Telegram Post
• https://bugzilla.suse.com/show_bug.cgi?id=1130388 · Note