Security restrictions bypass in xdg-user-dirs - CVE-2017-15131

Vulnerability identifier: #VU12180

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-15131

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to bypass security restrictions on the target system.

The weakness exists due to system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. A local attacker can bypass security restrictions.

xdg-user-dirs
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power

Update to version 0.15.5.

• https://access.redhat.com/security/cve/cve-2017-15131

• Security restrictions bypass in xdg-user-dirs
• Red Hat update for xdg-user-dirs