blog.mirch.io
https://blog.mirch.io/2018/12/21/cve-2018-18629-keybase-linux-privilege-escalation CVE-2018-18629
HIGH
Keybase keybase-redirector - '$PATH' Local Privilege Escalation
Record summary
CVE-2018-18629 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBKeybase keybase-redirector - '$PATH' Local Privilege EscalationExploitDB exploitby mirchrNot analyzed1 file
References
4hackerone.com
https://hackerone.com/reports/426944 keybase.ioConfirmation
https://keybase.io/docs/secadv/kb002 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-18629