CVE-2013-2207: Low severity gnu c library (glibc) vulnerability
A security flaw was found in the way ptchown, a helper function for grantpt(3) to change ownership and permissions of pseudoterminal, of glibc, the collection of GNU libc libraries, performed pseudotty ownership and permission changes when granting access to the slave pseudoterminal. A local attacker could use this flaw to obtain unauthorized read / write access at the pseudoterminal of their choose by using a specially-crafted (by attacker supplied) file system.
Acknowledgements:
Red Hat would like to thank Martin Carpenter of Citco for reporting this issue.
Other sources
ptchown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2207?
CVE-2013-2207 has been assigned a high severity level due to its potential to allow local privilege escalation.
How do I fix CVE-2013-2207?
To fix CVE-2013-2207, update the GNU C Library (glibc) to a version higher than 2.17.
Who is affected by CVE-2013-2207?
CVE-2013-2207 affects all users of the GNU C Library (glibc) versions 2.0 through 2.17.
What causes CVE-2013-2207?
CVE-2013-2207 is caused by a flaw in the way the pt_chown function manages permissions and ownership for pseudoterminals.
Is CVE-2013-2207 being actively exploited?
There is no public information indicating that CVE-2013-2207 is actively exploited in the wild.