PT-2020-3492 · Canonical+1 · Ppp+2

Thomas Chauchefoin · Published 2020-08-04 · Updated 2021-11-18 · CVE-2020-15704

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ppp versions prior to 2.4.5-5ubuntu1.4 ppp versions prior to 2.4.5-5.1ubuntu2.3+esm2 ppp versions prior to 2.4.7-1+2ubuntu1.16.04.3 ppp versions prior to 2.4.7-2+2ubuntu1.3 ppp versions prior to 2.4.7-2+4.1ubuntu5.1 ppp versions prior to 2.4.7-2+4.1ubuntu6

Description The issue is related to the incorrect handling of module loading in the modprobe child process, allowing a local non-root attacker to exploit the MODPROBE OPTIONS environment variable and read arbitrary root files. This is a privilege escalation vulnerability.

Recommendations For versions prior to 2.4.5-5ubuntu1.4, update to version 2.4.5-5ubuntu1.4 or later. For versions prior to 2.4.5-5.1ubuntu2.3+esm2, update to version 2.4.5-5.1ubuntu2.3+esm2 or later. For versions prior to 2.4.7-1+2ubuntu1.16.04.3, update to version 2.4.7-1+2ubuntu1.16.04.3 or later. For versions prior to 2.4.7-2+2ubuntu1.3, update to version 2.4.7-2+2ubuntu1.3 or later. For versions prior to 2.4.7-2+4.1ubuntu5.1, update to version 2.4.7-2+4.1ubuntu5.1 or later. For versions prior to 2.4.7-2+4.1ubuntu6, update to version 2.4.7-2+4.1ubuntu6 or later.

Fix

Files Accessible to External Parties

Information Disclosure

RCE

Weakness Enumeration

CWE-552

CWE-200

CWE-20

Related Identifiers

BDU:2020-03817

CVE-2020-15704

USN-4451-1

USN-4451-2

ZDI-20-980

Affected Products

Linuxmint

Ubuntu

Ppp

References · 17

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15704 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4451-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-15704 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-15704 · Security Note
• https://ubuntu.com/security/notices/USN-4451-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15704 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15704 · Security Note
• https://osv.dev/vulnerability/USN-4451-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15704 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4451-2 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-980 · Security Note
• https://bdu.fstec.ru/vul/2020-03817 · Security Note
• https://t.me/secharvester/9810 · Telegram Post
• https://t.me/defcon_news/56355 · Telegram Post
• https://t.me/canyoupwnme/6617 · Telegram Post