CVE-2020-25860 Race condition in Pengutronix RAUC
An attacker can exploit a race condition in the RAUC update client to bypass signature verification and install arbitrary code on the device.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-25860?
CVE-2020-25860 is a medium-severity vulnerability in Pengutronix RAUC, published on 21 Dec 2020. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.
Weakness: CWE-367
Which versions are affected by CVE-2020-25860?
It affects 1 product.
Products include Pengutronix Rauc.
How do I fix CVE-2020-25860?
Upgrade to a fixed version.
Is CVE-2020-25860 being exploited?
There is no known exploitation of CVE-2020-25860 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Pengutronix RAUC
Sources
Also known as DEBIAN-CVE-2020-25860, GHSA-cgf3-h62j-w9vv, UBUNTU-CVE-2020-25860.