CVE-2013-2207

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

From the Ubuntu Security Team

Martin Carpenter discovered that pt_chown in the GNU C Library did not properly check permissions for tty files. A local attacker could use this to gain administrative privileges or expose sensitive information.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
eglibc	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Fixed 2.19-0ubuntu6.8
	12.04 LTS precise	Fixed 2.15-0ubuntu10.14
glibc	17.04 zesty	Not affected
	16.10 yakkety	Not affected
	16.04 LTS xenial	Not affected
	15.10 wily	Fixed 2.21-0ubuntu4.2
	15.04 vivid	Ignored
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release

Notes

mdeslaur

patch disables building of pt_chown We can't just remove pt_chown from older releases, as unfortunately a lot of stuff still needs it, like lxc for example. We'll need to identify them first and fix them at the same time. While this CVE was originally marked as fixed in 2.17-93ubuntu2, it got reverted in 2.17-93ubuntu4.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
eglibc	Upstream: http://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=e4608715e6e1dd2adc91982fd151d5ba4f761d69

From the Ubuntu Security Team

Status

Notes

mdeslaur

Patch details

References

Related Ubuntu Security Notices (USN)

Other references