SB2018122110 - Privilege escalation in Keybase

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Privilege escalation (CVE-ID: N/A)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to insufficient permission checking by the Keybase Helper process. A local attacker can gain elevated privileges to upgrade the FUSE kext and load it on machine startup.

2) Privilege escalation (CVE-ID: CVE-2018-18629)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to in the Keybase command-line client untrusted search path in the keybase-redirector application. A local unprivileged attacker can gain root privileges via a Trojan horse binary.

Remediation

Install update from vendor's website.

References

• https://keybase.io/docs/secadv/kb001
• https://hackerone.com/reports/397478
• https://keybase.io/docs/secadv/kb002
• https://hackerone.com/reports/426944