CVE-2019-18932 Race condition in n/a
Local attackers can exploit a race condition in sarg's temporary directory handling to escalate privileges and modify privileged files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-18932?
CVE-2019-18932 is a high-severity vulnerability in Opensuse Backports Sle, published on 21 Jan 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.
Which versions are affected by CVE-2019-18932?
It affects 3 products.
Linux distribution packages (2)
sarg SUSE:Package Hub 15 SP1 | All versions | 2.3.10-bp151.4.3.1 |
sarg openSUSE:Leap 15.1 | All versions | 2.3.10-lp151.3.3.1 |
Products include Opensuse Backports Sle, Opensuse Leap, Squid Analysis Report Generator Project Squid Analysis Report Generator.
How do I fix CVE-2019-18932?
Apply the vendor's patch.
Is CVE-2019-18932 being exploited?
There is no known exploitation of CVE-2019-18932 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Backports Sle
Sources
Also known as DEBIAN-CVE-2019-18932, GHSA-jcx8-j739-fp6q, UBUNTU-CVE-2019-18932, openSUSE-SU-2020:0117-1, openSUSE-SU-2020:0140-1.