CVE-2010-1149: Infoleak
Bastian Blank reported: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576687
an information leak in the way udisks's disks and storage device management daemon passed sensitive device mapper table information to userspace processes via the udev interface. Local attacker could use this flaw to conduct subsequent unauthorized operations on storage device(s), which should be otherwise protected by encryption / luks passphrase knowledge.
Upstream bug report: [2] https://bugs.freedesktop.org/showbug.cgi?id=27494
Upstream patch: [3] http://cgit.freedesktop.org/udisks/commit/?id=0fcc7cb3b66f23fac53ae08647aa0007a2bd56c4
References: [4] https://bugzilla.novell.com/showbug.cgi?id=594261
CVE Request: [5] http://www.openwall.com/lists/oss-security/2010/04/06/5
Other sources
probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1149?
The severity of CVE-2010-1149 is rated as medium due to the potential exposure of encryption keys.
How do I fix CVE-2010-1149?
To fix CVE-2010-1149, upgrade udisks to version 1.0.1 or later.
What types of systems are affected by CVE-2010-1149?
CVE-2010-1149 affects systems running udisks versions prior to 1.0.1.
Can CVE-2010-1149 lead to data breaches?
Yes, CVE-2010-1149 can lead to data breaches as local users may access sensitive encryption keys.
Who is impacted by CVE-2010-1149?
Local users on systems running vulnerable versions of udisks are impacted by CVE-2010-1149.