CVE-2019-19726: High severity openbsd vulnerability
OpenBSD through 6.6 allows local users to escalate to root because a check for LDLIBRARYPATH in setuid programs can be defeated by setting a very small RLIMITDATA resource limit. When executing chpass or passwd (which are setuid root), dlsetupenv in ld.so tries to strip LDLIBRARYPATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this OpenBSD vulnerability?
The vulnerability ID for this OpenBSD vulnerability is CVE-2019-19726.
What is the severity score of CVE-2019-19726?
The severity score of CVE-2019-19726 is 7.8 (high).
How does the vulnerability allow local users to escalate to root?
The vulnerability allows local users to escalate to root by defeating a check for LD_LIBRARY_PATH in setuid programs through a small RLIMIT_DATA resource limit.
Which version of OpenBSD is affected by this vulnerability?
Version 6.6 of OpenBSD is affected by this vulnerability.
Are there any references available for this vulnerability?
Yes, there are references available for this vulnerability. You can find them at the following links: [link1], [link2], [link3].