Permissions, Privileges, and Access Controls in IBus - CVE-2019-14822

Vulnerability identifier: #VU21199

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-14822

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to iBus does not check user privileges when allowing connection to the AF_UNIX socket. A local user can connect to an existing AF_UNIX socket and perform arbitrary actions, such read and send messages on behalf of another user connected on a graphical environment. 

IBus
scribus (Debian package)
ibus (Ubuntu package)
glib2 (Red Hat package)
ibus (Red Hat package)
ibus-devel
ibus-help
ibus-debuginfo
ibus-libs
ibus-debugsource
ibus
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Opensuse
openEuler
Fedora
Data Computing Appliance (DCA)
Ansible Automation Platform
Red Hat OpenShift Container Platform

Install update from vendor's website.

IBus - update to 1.5.22
scribus (Debian package) - addressed in versions 1.5.14-3+deb9u2, 1.5.19-4+deb10u1
ibus (Ubuntu package) - addressed in versions 1.5.11-1ubuntu2.4, 1.5.17-3ubuntu5.3, 1.5.21-1~exp2ubuntu2.1
glib2 (Red Hat package) - addressed in versions 2.56.1-7.el7, 2.56.4-8.el8
Data Computing Appliance (DCA) - addressed in versions Firmware tool 3H00, 4.2.1.0
Ansible Automation Platform - addressed in versions 1.0, 1.1
ibus (Red Hat package) - update to 1.5.17-11.el7
ibus-devel - update to 1.5.19-8
ibus-help - update to 1.5.19-8
ibus-debuginfo - update to 1.5.19-8
ibus-libs - update to 1.5.19-8
ibus-debugsource - update to 1.5.19-8
ibus - update to 1.5.19-8
ibus - addressed in versions 1.5.19-17.fc29, 1.5.20-5.fc30, 1.5.21-2.fc31
Red Hat OpenShift Container Platform - update to 4.3.40

• https://www.openwall.com/lists/oss-security/2019/09/13/1
• https://github.com/ibus/ibus/commit/3d442dbf936d197aa11ca0a71663c2bc61696151

• Privilege escalation in iBus
• Debian update for ibus
• OpenSUSE Linux update for ibus
• OpenSUSE Linux update for ibus
• Ubuntu update for IBus
• Red Hat Enterprise Linux 8 update for glib2 and ibus
• Red Hat Enterprise Linux 7 update for glib2 and ibus
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• openEuler update for ibus
• Multiple vulnerabilities in Ansible Automation Platform 1.0 packages
• Multiple vulnerabilities in Ansible Automation Platform 1.1 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.3
• Fedora 29 update for ibus
• Fedora 31 update for ibus
• Fedora 30 update for ibus