| Vulnerability Name: | CVE-2019-15793 (CCN-171527) | ||||||||||||||||
| Assigned: | 2019-11-01 | ||||||||||||||||
| Published: | 2019-11-01 | ||||||||||||||||
| Updated: | 2020-05-01 | ||||||||||||||||
| Summary: | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whereas they should have been translated into the s_user_ns for the lower filesystem. This resulted in using ids other than the intended ones in the lower fs, which likely did not map into the shifts s_user_ns. A local attacker could use this to possibly bypass discretionary access control permissions. | ||||||||||||||||
| CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) 7.9 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C)
6.9 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C)
| ||||||||||||||||
| CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||||||
| Vulnerability Type: | CWE-276 | ||||||||||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2019-15793 Source: CCN Type: Google Security Research Issue 1957 Ubuntu: refcount underflow and type confusion in shiftfs Source: XF Type: UNKNOWN ubuntu-cve201915793-sec-bypass(171527) Source: MISC Type: Mailing List, Patch, Third Party Advisory https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=3644b9d5688da86f18e017c9c580b75cf52927bb Source: CCN Type: Packet Storm Security [11-14-2019] Ubuntu shiftfs refcount Underflow / Type Confusion Source: CCN Type: Ubuntu Web site USN-4184-1: Linux kernel vulnerabilities Source: MISC Type: Third Party Advisory https://usn.ubuntu.com/usn/usn-4183-1 Source: MISC Type: Third Party Advisory https://usn.ubuntu.com/usn/usn-4184-1 Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [11-20-2019] Source: CCN Type: IBM Security Bulletin 6205697 (Workload Automation) Muluple vulnerabilities in Ubuntu affect IBM Workload Scheduler 9.5 | ||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||
| Oval Definitions | |||||||||||||||||
| |||||||||||||||||
| BACK | |||||||||||||||||