CVE-2019-19520 - OpenCVE

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:L/AC:L/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Openbsd	Openbsd

Configuration 1 [-]

cpe:2.3:o:openbsd:openbsd:6.6:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2019/Dec/14
http://www.openwall.com/lists/oss-security/2019/12/04/5
http://www.openwall.com/lists/oss-security/2019/12/04/6
https://seclists.org/bugtraq/2019/Dec/8
https://www.openbsd.org/errata66.html
https://www.openwall.com/lists/oss-security/2019/12/04/5

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-12-04T23:34:21

Updated: 2024-08-05T02:16:48.540Z

Reserved: 2019-12-03T00:00:00

Link: CVE-2019-19520

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2019-12-05T00:15:11.307

Modified: 2020-08-24T17:37:01.140

Link: CVE-2019-19520

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-06T21:06:05", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"tags": ["x_refsource_MISC"], "url": "https://www.openbsd.org/errata66.html"}, {"name": "[oss-security] 20191204 Re: Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/6"}, {"name": "[oss-security] 20191204 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"name": "20191205 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "https://seclists.org/bugtraq/2019/Dec/8"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html"}, {"name": "20191206 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2019/Dec/14"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-19520", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.openwall.com/lists/oss-security/2019/12/04/5", "refsource": "MISC", "url": "https://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"name": "https://www.openbsd.org/errata66.html", "refsource": "MISC", "url": "https://www.openbsd.org/errata66.html"}, {"name": "[oss-security] 20191204 Re: Authentication vulnerabilities in OpenBSD", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2019/12/04/6"}, {"name": "[oss-security] 20191204 Authentication vulnerabilities in OpenBSD", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"name": "20191205 Authentication vulnerabilities in OpenBSD", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Dec/8"}, {"name": "http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html"}, {"name": "20191206 Authentication vulnerabilities in OpenBSD", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2019/Dec/14"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T02:16:48.540Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.openbsd.org/errata66.html"}, {"name": "[oss-security] 20191204 Re: Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/6"}, {"name": "[oss-security] 20191204 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"name": "20191205 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "https://seclists.org/bugtraq/2019/Dec/8"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html"}, {"name": "20191206 Authentication vulnerabilities in OpenBSD", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2019/Dec/14"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-19520", "datePublished": "2019-12-04T23:34:21", "dateReserved": "2019-12-03T00:00:00", "dateUpdated": "2024-08-05T02:16:48.540Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:openbsd:openbsd:6.6:*:*:*:*:*:*:*", "matchCriteriaId": "0E0CC007-1428-4683-A196-3544F1C9CC92", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen."}, {"lang": "es", "value": "xlock en OpenBSD versiones 6.6, permite a usuarios locales conseguir los privilegios del grupo de autenticaci\u00f3n al proporcionar una variable de entorno LIBGL_DRIVERS_PATH, porque el archivo xenocara/lib/mesa/src/loader/loader.c maneja inapropiadamente dlopen."}], "id": "CVE-2019-19520", "lastModified": "2020-08-24T17:37:01.140", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-05T00:15:11.307", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2019/Dec/14"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/5"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2019/12/04/6"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://seclists.org/bugtraq/2019/Dec/8"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.openbsd.org/errata66.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://www.openwall.com/lists/oss-security/2019/12/04/5"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}