CVE-2019-13272

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 52,2%

Kerentanan pada linux kernel, debian linux +20 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 10 Desember 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.

Rincian

Terbit di NVD

17 Juli 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

52,2% peluang dieksploitasi; lebih tinggi dari 98,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Linux Kernel Improper Privilege Management Vulnerability

Masuk KEV

10 Desember 2021

Tenggat CISA

10 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17 patch · advisory vendor
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106... patch · advisory vendor
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1903 exploit · issue tracking · patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1730895 issue tracking · patch
• https://bugzilla.suse.com/show_bug.cgi?id=1140671 issue tracking · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13272 pemerintah AS
• http://packetstormsecurity.com/files/153663/Linux-PTRACE_TRACEME-Broken-Permission-Object-Lifetime-Handling.ht... advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/154957/Linux-Polkit-pkexec-Helper-PTRACE_TRACEME-Local-Root.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/156929/Linux-PTRACE_TRACEME-Local-Root.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/165051/Linux-Kernel-5.1.x-PTRACE_TRACEME-pkexec-Local-Privilege-Escalatio... exploit · advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2019:2405 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2019:2411 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2019:2809 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2019/07/msg00023.html mailing list · advisory pihak ketiga
• https://seclists.org/bugtraq/2019/Jul/30 issue tracking · mailing list · advisory pihak ketiga
• https://seclists.org/bugtraq/2019/Jul/33 issue tracking · mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20190806-0001/ advisory pihak ketiga
• https://support.f5.com/csp/article/K91025336 advisory pihak ketiga
• https://support.f5.com/csp/article/K91025336?utm_source=f5support&amp%3Butm_medium=RSS advisory pihak ketiga
• https://usn.ubuntu.com/4093-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4094-1/ advisory pihak ketiga