Untrusted search path in libva - CVE-2023-39929

Vulnerability identifier: #VU91605

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-39929

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.

libva
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Enterprise Storage
openSUSE Leap
openEuler
Anolis OS
libva-debugsource
libva-devel
libva-debuginfo
libva
libva-x11-2
libva2-debuginfo
libva-drm2
libva2
libva-drm2-debuginfo
libva-x11-2-debuginfo
libva-glx2-64bit
libva-devel-32bit
libva-drm2-64bit-debuginfo
libva-wayland2-64bit-debuginfo
libva-drm2-64bit
libva-gl-devel-64bit
libva-x11-2-64bit-debuginfo
libva-wayland2-64bit
libva-glx2-64bit-debuginfo
libva2-64bit
libva-glx2
libva-x11-2-64bit
libva2-64bit-debuginfo
libva-devel-64bit
libva-wayland2
libva-gl-devel-32bit
libva-gl-debugsource
libva-gl-devel
libva-glx2-debuginfo
libva-wayland2-debuginfo
libva-drm2-32bit-debuginfo
libva-wayland2-32bit-debuginfo
libva-wayland2-32bit
libva2-32bit-debuginfo
libva-glx2-32bit-debuginfo
libva-x11-2-32bit-debuginfo
libva2-32bit
libva-x11-2-32bit
libva-glx2-32bit
libva-drm2-32bit
libva-doc

Install updates from vendor's website.

libva - update to 2.20.0
libva-debugsource - update to 2.20.0-1
libva-devel - update to 2.20.0-1
libva-debuginfo - update to 2.20.0-1
libva - update to 2.20.0-1
libva-debugsource - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2 - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2-debuginfo - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2 - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-devel - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2 - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2-debuginfo - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2-debuginfo - addressed in versions 2.20.0-3.3.4, 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-devel-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2-64bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2-64bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-gl-devel-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2-64bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2-64bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2 - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2-64bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-devel-64bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2 - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-gl-devel-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-gl-debugsource - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-gl-devel - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2-32bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2-32bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-wayland2-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2-32bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2-32bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2-32bit-debuginfo - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva2-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-x11-2-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-glx2-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-drm2-32bit - addressed in versions 2.20.0-150300.3.3.1, 2.20.0-150400.3.5.1, 2.20.0-150500.3.5.1
libva-doc - update to 2.22.0-1
libva - update to 2.22.0-1
libva-devel - update to 2.22.0-1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html

• Privilege escalation in Intel Libva library
• openEuler update for libva
• Anolis OS update for libva
• SUSE update for libva
• SUSE update for libva
• SUSE update for libva
• SUSE update for libva