CVE-2017-15131 Misconfiguration in RHEL shipped xdg-user-dirs and gnome-session
Attackers can read sensitive files in XDG user directories because the system umask policy is not applied during directory creation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-15131?
CVE-2017-15131 is a high-severity vulnerability in Redhat Enterprise Linux, published on 9 Jan 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.
Which versions are affected by CVE-2017-15131?
It affects 2 products.
Linux distribution packages (8)
xdg-user-dirs Red Hat:enterprise_linux:7::client | All versions | 0:0.15-5.el7 |
xdg-user-dirs-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:0.15-5.el7 |
xdg-user-dirs Red Hat:enterprise_linux:7::computenode | All versions | 0:0.15-5.el7 |
xdg-user-dirs-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:0.15-5.el7 |
xdg-user-dirs Red Hat:enterprise_linux:7::server | All versions | 0:0.15-5.el7 |
xdg-user-dirs-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:0.15-5.el7 |
xdg-user-dirs Red Hat:enterprise_linux:7::workstation | All versions | 0:0.15-5.el7 |
xdg-user-dirs-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:0.15-5.el7 |
Products include Freedesktop Xdg-User-Dirs, Redhat Enterprise Linux.
How do I fix CVE-2017-15131?
Upgrade to a fixed version.
Is CVE-2017-15131 being exploited?
There is no known exploitation of CVE-2017-15131 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2017-15131, GHSA-q4r5-4gjj-jww9, MGASA-2018-0215, RHSA-2018:0842.