bash-4.4.19-14.el8
エラータID: AXSA:2021-1784:01
リリース日:
2021/06/06 Sunday - 04:22
題名:
bash-4.4.19-14.el8
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Low
Description:
以下項目について対処しました。
[Security Fix]
- GNU Bash には shell.c 内の disable_priv_mode 関数が実効 UID が
実 UID と一致しない状態で起動された場合、実効UIDを実UIDに
設定することにより特権を放棄する機能がありますが、正常に動作しないため、
攻撃者は setuid() を用いるビルトインを "enable -f" によって読み込むことで、
特権を回復できてしまう脆弱性があります。(CVE-2019-18276)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2019-18276
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.
追加情報:
N/A
ダウンロード:
SRPMS
- bash-4.4.19-14.el8.src.rpm
MD5: 06df9a7c25c1961babb34f8b916a79b8
SHA-256: a5f778a631e94dbddad6e514b1fc0e995e82aaa81635101b414373333f2c2032
Size: 9.04 MB
Asianux Server 8 for x86_64
- bash-4.4.19-14.el8.x86_64.rpm
MD5: 989def4bd414fe67fc657239f52614d5
SHA-256: 105e22e7f790359a7efd5de7110ee786ce23c5d99eea8a9ff0c570b2b67ae6cc
Size: 1.55 MB - bash-doc-4.4.19-14.el8.x86_64.rpm
MD5: db06c17838fe6e103d2dc6678877e9fc
SHA-256: 8de2e40597fd872318866ed0d5e53a2454084a86076d20517a347c35684ea1ee
Size: 1.25 MB
English