CVE-2019-19726 Privilege escalation in n/a
Local attackers can escalate to root privileges by exploiting a memory allocation failure in the dynamic linker when processing setuid programs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19726?
CVE-2019-19726 is a high-severity vulnerability in Openbsd Openbsd, published on 12 Dec 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_env in ld.so tries to strip LD_LIBRARY_PATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root.
Weakness: CWE-269
Which versions are affected by CVE-2019-19726?
It affects 1 product.
Products include Openbsd Openbsd.
How do I fix CVE-2019-19726?
No fix has been published for CVE-2019-19726 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-19726 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-19726 exists.
Public exploit code: 1 Metasploit module and 3 Exploit-DB entries.
Other vulnerabilities in Openbsd Openbsd
Sources
Also known as GHSA-wj9q-g984-cx8g.