CVE-2020-13696: Medium severity xawtv (linuxtv) vulnerability
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen() in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to test for the existence of arbitrary files and to trigger an open on arbitrary files with mode ORDWR. To achieve this, relative path components need to be added to the device path, as demonstrated by a v4l-conf -c /dev/../root/.bashhistory command.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-13696?
CVE-2020-13696 has a medium severity rating due to its potential for unauthorized local access.
How do I fix CVE-2020-13696?
To fix CVE-2020-13696, upgrade xawtv to version 3.107 or later.
What software is affected by CVE-2020-13696?
CVE-2020-13696 affects LinuxTV xawtv versions prior to 3.107, including specific versions in Debian and Ubuntu.
Can CVE-2020-13696 be exploited remotely?
CVE-2020-13696 cannot be exploited remotely as it requires local access to the affected system.
Who is at risk for CVE-2020-13696?
Local attackers with access to the v4l-conf setuid-root program on vulnerable systems are at risk for CVE-2020-13696.