An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-10-18T15:44:17
Updated: 2024-08-05T01:03:31.938Z
Reserved: 2019-09-03T00:00:00
Link: CVE-2019-15901
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-10-18T16:15:10.320
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-15901
Redhat
No data.