CVE-2018-18629: High severity keybase vulnerability
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-18629?
CVE-2018-18629 is a vulnerability in the Keybase command-line client for Linux that allows a local, unprivileged user to gain root privileges.
How does the CVE-2018-18629 vulnerability work?
The CVE-2018-18629 vulnerability is an untrusted search path vulnerability in the keybase-redirector application, which allows an attacker to execute a Trojan horse binary and gain root privileges.
What is the severity of the CVE-2018-18629 vulnerability?
The severity of the CVE-2018-18629 vulnerability is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2018-18629?
The Keybase command-line client versions before 2.8.0-20181023124437 for Linux are affected by CVE-2018-18629.
How can I fix the CVE-2018-18629 vulnerability?
To fix the CVE-2018-18629 vulnerability, update the Keybase command-line client to version 2.8.0-20181023124437 or later.