CVE-2020-27187
Published: 26 October 2020
An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related commands, while KDE Partition Manager is running. the mount command can then be used to gain full root privileges.
Priority
Status
Package | Release | Status |
---|---|---|
kpmcore Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Needs triage
|
|
groovy |
Ignored
(end of life)
|
|
hirsute |
Not vulnerable
(4.2.0-2)
|
|
impish |
Not vulnerable
(4.2.0-2)
|
|
jammy |
Not vulnerable
(4.2.0-2)
|
|
kinetic |
Not vulnerable
(4.2.0-2)
|
|
lunar |
Not vulnerable
(4.2.0-2)
|
|
mantic |
Not vulnerable
(4.2.0-2)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.2.0-1)
|
|
xenial |
Does not exist
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://kde.org/info/security/advisory-20201017-1.txt
- https://invent.kde.org/system/kpmcore/-/commit/c466c5db11b5cee546d1ec0594c2f1105a354fed (fix)
- https://invent.kde.org/system/kpmcore/-/commit/7ec4b611dcf822439b081613cca4184689266454 (removes KF5 5.73 dependency)
- https://bugzilla.redhat.com/show_bug.cgi?id=1890199
- https://www.cve.org/CVERecord?id=CVE-2020-27187
- NVD
- Launchpad
- Debian