7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
18.9%
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c
mishandles the recording of the credentials of a process that wants to
create a ptrace relationship, which allows local users to obtain root
access by leveraging certain scenarios with a parent-child process
relationship, where a parent drops privileges and calls execve (potentially
allowing control by an attacker). One contributing factor is an object
lifetime issue (which can also cause a panic). Another contributing factor
is incorrect marking of a ptrace relationship as privileged, which is
exploitable through (for example) Polkitβs pkexec helper with
PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in
some environments.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | <Β 4.15.0-58.64 | UNKNOWN |
ubuntu | 19.04 | noarch | linux | <Β 5.0.0-25.26 | UNKNOWN |
ubuntu | 16.04 | noarch | linux | <Β 4.4.0-159.187 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | <Β 4.15.0-1047.49 | UNKNOWN |
ubuntu | 19.04 | noarch | linux-aws | <Β 5.0.0-1014.16 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws | <Β 4.4.0-1090.101 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws-hwe | <Β 4.15.0-1047.49~16.04.1 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-azure | <Β 5.0.0-1014.14~18.04.1 | UNKNOWN |
ubuntu | 19.04 | noarch | linux-azure | <Β 5.0.0-1014.14 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-azure | <Β 4.15.0-1055.60 | UNKNOWN |
packetstormsecurity.com/files/153663/Linux-PTRACE_TRACEME-Broken-Permission-Object-Lifetime-Handling.html
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee
launchpad.net/bugs/cve/CVE-2019-13272
nvd.nist.gov/vuln/detail/CVE-2019-13272
security-tracker.debian.org/tracker/CVE-2019-13272
ubuntu.com/security/notices/USN-4093-1
ubuntu.com/security/notices/USN-4094-1
ubuntu.com/security/notices/USN-4095-1
ubuntu.com/security/notices/USN-4117-1
ubuntu.com/security/notices/USN-4118-1
www.cve.org/CVERecord?id=CVE-2019-13272
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
18.9%