CVE-2012-5638: Low severity ovirt sanlock vulnerability
The sanlock server creates the /var/log/sanlock.log world writable allowing any one on the system to wipe the contents of the log file or to store data within the log file (bypassing any quotas applied to their account). The affected code is:
src/log.h
int setuplogging(void) { int fd, rv; snprintf(logfilepath, PATHMAX, "%s/%s", SANLKLOGDIR, SANLKLOGFILENAME); logfilefp = fopen(logfilepath, "a+");
Other sources
The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5638?
CVE-2012-5638 is considered a medium severity vulnerability due to its potential for misuse by local users.
How do I fix CVE-2012-5638?
To fix CVE-2012-5638, ensure that the log file at /var/log/sanlock.log is set to a more restrictive permission, such as 644.
Who is affected by CVE-2012-5638?
CVE-2012-5638 affects systems running the oVirt Sanlock service that are using the vulnerable logging configuration.
What are the risks of CVE-2012-5638?
The risks of CVE-2012-5638 include the ability for unauthorized users to modify or delete log contents, which can lead to loss of important logging information.
Is a patch available for CVE-2012-5638?
Yes, patches are available in the vendor's security updates for oVirt Sanlock to address CVE-2012-5638.