Lucene search
PRIOn knowledge basePRION:CVE-2020-27187HistoryOct 26, 2020 - 5:15 p.m.
Design/Logic Flaw
2020-10-2617:15:00
PRIOn knowledge base
www.prio-n.com
5
An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related commands, while KDE Partition Manager is running. the mount command can then be used to gain full root privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| partition_manager | ge | 4.1.0 | |
| partition_manager | lt | 4.2.0 |
Related
openvas
openvas
Fedora: Security Advisory for kde-partitionmanager (FEDORA-2020-73471e6414)
2020-10-24 00:00:00
Fedora: Security Advisory for kpmcore (FEDORA-2020-73471e6414)
2020-10-24 00:00:00
Fedora: Security Advisory for calamares (FEDORA-2020-73471e6414)
2020-10-24 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: kpmcore-4.2.0-1.fc33
2020-10-23 22:27:01
[SECURITY] Fedora 33 Update: kde-partitionmanager-4.2.0-1.fc33
2020-10-23 22:27:01
[SECURITY] Fedora 33 Update: calamares-3.2.11-14.fc33
2020-10-23 22:27:00
ubuntucve
ubuntucve
CVE-2020-27187
2020-10-26 00:00:00
cve
cve
CVE-2020-27187
2020-10-26 17:15:12
gentoo
gentoo
KPMCore: Root privilege escalation
2020-11-03 00:00:00
archlinux
archlinux
[ASA-202010-8] kpmcore: privilege escalation
2020-10-18 00:00:00
osv
osv
CVE-2020-27187
2020-10-26 17:15:12
cvelist
cvelist
CVE-2020-27187
2020-10-26 16:19:47
nessus
nessus
GLSA-202011-03 : KPMCore: Root privilege escalation
2020-11-03 00:00:00
Fedora 33 : calamares / kde-partitionmanager / kpmcore (2020-73471e6414)
2020-10-26 00:00:00
alpinelinux
alpinelinux
CVE-2020-27187
2020-10-26 17:15:12
debiancve
debiancve
CVE-2020-27187
2020-10-26 17:15:12
veracode
veracode
Privilege Escalation
2021-04-29 10:18:13
nvd
nvd
CVE-2020-27187
2020-10-26 17:15:12