CVE-2019-12779
First published: Wed Apr 03 2019(Updated: )
libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Clusterlabs Libqb | <1.0.5 | |
| redhat/libqb | <1.0.4 | 1.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00031.html
- http://www.securityfocus.com/bid/108691
- https://access.redhat.com/errata/RHSA-2019:3610
- https://bugzilla.redhat.com/show_bug.cgi?id=1695948
- https://github.com/ClusterLabs/libqb/issues/338
- https://github.com/ClusterLabs/libqb/releases/tag/v1.0.4
- https://github.com/ClusterLabs/libqb/releases/tag/v1.0.5
- https://security.gentoo.org/glsa/202107-03
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1685297
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1695949
- https://lists.clusterlabs.org/pipermail/users/2019-April/025712.html
- https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
- https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1695948#c6
- https://access.redhat.com/security/cve/CVE-2019-12779
- https://access.redhat.com/security/cve/cve-2019-12779
- https://access.redhat.com/errata/RHSA-2020:1189
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1714855
Frequently Asked Questions
What is CVE-2019-12779?
CVE-2019-12779 is a vulnerability in libqb before version 1.0.5 that allows local users to overwrite arbitrary files via a symlink attack.
How does CVE-2019-12779 work?
CVE-2019-12779 works by using predictable filenames (under /dev/shm and /tmp) without O_EXCL, making it susceptible to symlink attacks.
What is the severity of CVE-2019-12779?
CVE-2019-12779 has a severity rating of 7.1 (high).
Which software is affected by CVE-2019-12779?
Clusterlabs Libqb before version 1.0.5 and Red Hat libqb before version 1.0.4 are affected by CVE-2019-12779.
How can I fix CVE-2019-12779?
To fix CVE-2019-12779, update Clusterlabs Libqb to version 1.0.5 or higher and Red Hat libqb to version 1.0.4 or higher.
- collector/nvd-index
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-12779
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/clusterlabs
- canonical/clusterlabs libqb
- package-manager/redhat