PT-2020-5190 · Project Atomic+1 · Bubblewrap+1

Alexlarsson · Published 2020-03-31 · Updated 2024-06-15 · CVE-2020-5291

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Bubblewrap versions prior to 0.4.1

Description The issue is related to insecure privilege management in the Bubblewrap application. Exploitation of this issue may allow a remote attacker to impact the confidentiality and integrity of protected information. The vulnerability can be exploited when Bubblewrap is installed in setuid mode and the kernel supports unprivileged user namespaces, allowing an attacker to use the bwrap --userns2 option to gain root permissions. This issue is known to affect certain configurations of Debian, Arch, and Centos systems where unprivileged user namespaces are enabled.

Recommendations For Bubblewrap versions prior to 0.4.1, update to version 0.4.1 or later to resolve the issue. As a temporary workaround, consider disabling the setuid mode for Bubblewrap until the update is applied. Additionally, restrict the use of the bwrap --userns2 option to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-648

Related Identifiers

ALT-PU-2020-1650

ALT-PU-2020-1893

BDU:2020-05810

CVE-2020-5291

GHSA-J2QP-RVXJ-43VJ

OPENSUSE-SU-2024:10663-1

Affected Products

Alt Linux

Bubblewrap

References · 18

• https://github.com/containers/bubblewrap/commit/1f7e2ad948c051054b683461885a0215f1806240 · Patch
• https://security-tracker.debian.org/tracker/CVE-2020-5291 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-5291 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-5291 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-5291 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10663-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5291 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-5291 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-5291 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05810 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5291 · Vendor Advisory
• https://github.com/containers/bubblewrap/security/advisories/GHSA-j2qp-rvxj-43vj · Note
• https://suse.com/security/cve/CVE-2020-5291 · Note
• https://suse.com/security/cve/CVE-2017-5226 · Note