Improper Check for Dropped Privileges Affecting libguestfs-rsync package, versions <1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b


Severity

Recommended
medium

Based on Oracle Linux security rating

    Threat Intelligence

    EPSS
    0.04% (6th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-ORACLE8-LIBGUESTFSRSYNC-2604963
  • published 10 Apr 2022
  • disclosed 29 Aug 2022

How to fix?

Upgrade Oracle:8 libguestfs-rsync to version 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b or higher.
This issue was patched in ELSA-2022-0886.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libguestfs-rsync package and not the libguestfs-rsync package as distributed by Oracle. See How to fix? for Oracle:8 relevant fixed versions and status.

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

CVSS Scores

version 3.1
Expand this section

NVD

7.8 high
  • Attack Vector (AV)
    Local
  • Attack Complexity (AC)
    Low
  • Privileges Required (PR)
    Low
  • User Interaction (UI)
    None
  • Scope (S)
    Unchanged
  • Confidentiality (C)
    High
  • Integrity (I)
    High
  • Availability (A)
    High
Expand this section

SUSE

7 high
Expand this section

Red Hat

7 high