CVE-2019-19520: High severity openbsd vulnerability

Published Dec 4, 2019

Updated

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGLDRIVERSPATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen.

Affected Software

1 affected component

OpenBSD OpenBSD=6.6

Event History

Dec 4, 2019

CVE Published

via MITRE·11:34 PM

Data Sourced

via MITRE·11:34 PM

Description

Frequently Asked Questions

What is CVE-2019-19520?

CVE-2019-19520 is a vulnerability in xlock in OpenBSD 6.6 that allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable.

How does CVE-2019-19520 impact OpenBSD 6.6?

CVE-2019-19520 allows local users to escalate their privileges and gain the privileges of the auth group in OpenBSD 6.6.

What is the severity of CVE-2019-19520?

CVE-2019-19520 has a severity score of 7.8, which is considered high.

How can I fix CVE-2019-19520 in OpenBSD 6.6?

To fix CVE-2019-19520 in OpenBSD 6.6, it is recommended to update to a patched version of xlock or apply the necessary security patches.

Where can I find more information about CVE-2019-19520?

You can find more information about CVE-2019-19520 in the following references: [link1], [link2], [link3].