CVE-2020-10759 Security feature bypass in fwupd
Attackers can bypass PGP signature checks in fwupd to install unsigned firmware, compromising system integrity and confidentiality.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-10759?
CVE-2020-10759 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 15 Sep 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.
Weakness: CWE-347
Which versions are affected by CVE-2020-10759?
It affects 1 product.
Linux distribution packages (20)
appstream-data AlmaLinux:8 | All versions | 8-20200724.el8 |
libxmlb AlmaLinux:8 | All versions | 0.1.15-1.el8 |
appstream-data Red Hat:enterprise_linux:8::appstream | All versions | 0:8-20200724.el8 |
gnome-software Red Hat:enterprise_linux:8::appstream | All versions | 0:3.36.1-4.el8 |
gnome-software-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:3.36.1-4.el8 |
gnome-software-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:3.36.1-4.el8 |
fwupd Red Hat:enterprise_linux:8::baseos | All versions | 0:1.4.2-4.el8 |
fwupd-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:1.4.2-4.el8 |
fwupd-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:1.4.2-4.el8 |
libxmlb Red Hat:enterprise_linux:8::baseos | All versions | 0:0.1.15-1.el8 |
libxmlb-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.1.15-1.el8 |
libxmlb-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:0.1.15-1.el8 |
libxmlb-tests-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.1.15-1.el8 |
appstream-data Rocky Linux:8 | All versions | 0:8-20200724.el8 |
libxmlb Rocky Linux:8 | All versions | 0:0.1.15-1.el8 |
fwupd SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | All versions | 1.0.9-6.3.1 |
fwupd SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 | All versions | 1.2.14-5.8.2 |
fwupd openSUSE:Leap 15.1 | All versions | 1.0.9-lp151.2.3.1 |
fwupd openSUSE:Leap 15.2 | All versions | 1.2.14-lp152.3.9.1 |
fwupd openSUSE:Tumbleweed | All versions | 1.5.8-1.5 |
Products include Redhat Enterprise Linux.
How do I fix CVE-2020-10759?
Apply the vendor's patch.
Is CVE-2020-10759 being exploited?
There is no known exploitation of CVE-2020-10759 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Redhat Enterprise Linux
- CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection
- CVE-2021-20325 Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a securit
- CVE-2018-25011 Memory corruption in libwebp
- CVE-2018-25014 Other in libwebp
- CVE-2014-3585 Supply chain in redhat-upgrade-tool
Sources
Also known as ALSA-2020:4436, DEBIAN-CVE-2020-10759, DLA-2274-1, GHSA-phhj-vpf5-5666, MGASA-2021-0158, OESA-2022-1801 and 10 more.