PT-2024-26866 · Linux Mint · Mintupload

1337Kid · Published 2024-05-19 · Updated 2024-07-10 · CVE-2024-36053

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mintupload versions through 4.2.0

Description The issue is related to service-name mishandling, which leads to command injection via shell metacharacters in functions such as check connection, drop data received cb, and Service.remove. A user can modify a service name in a ~/.linuxmint/mintUpload/services/service file to exploit this. The issue enables local attacks and can lead to system compromise.

Recommendations For versions through 4.2.0, patch immediately to prevent system compromise. As a temporary workaround, consider restricting access to the check connection, drop data received cb, and Service.remove functions until a patch is available. Additionally, avoid modifying service names in ~/.linuxmint/mintUpload/services/service files to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2024-36053

Affected Products

Mintupload

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-36053 · Security Note
• https://osv.dev/vulnerability/CVE-2024-36053 · Vendor Advisory
• https://github.com/linuxmint/mintupload/issues/42 · Note
• https://github.com/linuxmint/mintupload/issues/43 · Note
• https://twitter.com/CVEnew/status/1792236656512385451 · Twitter Post
• https://t.me/cvenotify/80396 · Telegram Post
• https://twitter.com/oktsec/status/1811206149191897489 · Twitter Post
• http://packages.linuxmint.com/pool/main/m/mintupload · Note
• https://twitter.com/VulmonFeeds/status/1792261625812079040 · Twitter Post