An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T01:03:31.938Z

Reserved: 2019-09-03T00:00:00

Link: CVE-2019-15901

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-10-18T16:15:10.320

Modified: 2024-11-21T04:29:41.890

Link: CVE-2019-15901

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.