Main
Vulnerability Database
Exploits
ID:5825 - Exploit for Permissions, Privileges, and Access Controls in OpenBSD - CVE-2019-19726
ID:5825 - Exploit for Permissions, Privileges, and Access Controls in OpenBSD - CVE-2019-19726
Published: June 17, 2021
Vulnerability identifier: #VU23831
Vulnerability risk: Low
CVE-ID: CVE-2019-19726
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
OpenBSD
OpenBSD
Link to public exploit:
Vulnerability description
The vulnerability allows a local usre to escalate privileges on the system.
The vulnerability exists due to check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a
very small RLIMIT_DATA resource limit. When executing chpass or passwd
(which are setuid root), _dl_setup_env in ld.so tries to strip
LD_LIBRARY_PATH from the environment, but fails when it cannot allocate
memory. A local user can execute arbitrary code on the system with root privileges.
Remediation
Install updates from vendor's website.