CVE-2019-12779: High severity libqb vulnerability
A flaw was found in libqb. Isecure handling of temporari files could be exploited by a local attacker to overwrite privileged system files.
Upstream issue:
https://github.com/ClusterLabs/libqb/issues/338
References:
https://bugzilla.redhat.com/showbug.cgi?id=1685297
Other sources
libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without OEXCL.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-12779?
CVE-2019-12779 is a vulnerability in libqb before version 1.0.5 that allows local users to overwrite arbitrary files via a symlink attack.
How does CVE-2019-12779 work?
CVE-2019-12779 works by using predictable filenames (under /dev/shm and /tmp) without O_EXCL, making it susceptible to symlink attacks.
What is the severity of CVE-2019-12779?
CVE-2019-12779 has a severity rating of 7.1 (high).
Which software is affected by CVE-2019-12779?
Clusterlabs Libqb before version 1.0.5 and Red Hat libqb before version 1.0.4 are affected by CVE-2019-12779.
How can I fix CVE-2019-12779?
To fix CVE-2019-12779, update Clusterlabs Libqb to version 1.0.5 or higher and Red Hat libqb to version 1.0.4 or higher.