PT-2021-23838 · Gnu Hurd · Gnu Hurd

Sergey Bugaev · Published 2021-11-07 · Updated 2022-07-12 · CVE-2021-43411

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU Hurd versions prior to 0.9 20210404-9

Description An issue was discovered that allows exploitation to gain full root access. This occurs when trying to exec a setuid executable, creating a window of time where the process has new privileges but still refers to the old task, making it accessible through the old process port.

Recommendations For GNU Hurd versions prior to 0.9 20210404-9, update to version 0.9 20210404-9 or later to resolve the issue.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2021-43411

Affected Products

Gnu Hurd

References · 6

• 🔥 https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html · Exploit
• 🔥 https://mail-archive.com/[e-mail]/msg32112.html · Exploit
• https://salsa.debian.org/hurd-team/hurd/-/blob/4d1b079411e2f40576e7b58f9b5b78f733a2beda/debian/patches/0034-proc-Use-UIDs-for-evaluating-permissions.patch · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-43411 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43411 · Vendor Advisory
• https://mail-archive.com/bug-hurd%40gnu.org/msg32112.html · Note