CVE-2019-12779

HIGH

libqb < 1.0.5 - Arbitrary File Overwrite via Symlink Attack

Title source: llm
STIX 2.1

Description

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.

References (10)

Core 10
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/ClusterLabs/libqb/issues/338
Exploit, Patch, Third Party Advisory, VDB Entry x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1695948
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.5
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.4
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/108691
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:3610
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202107-03

Scores

CVSS v3 7.1
EPSS 0.0066
EPSS Percentile 46.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-59
Status published
Products (1)
clusterlabs/libqb < 1.0.5
Published Jun 07, 2019
Tracked Since Feb 18, 2026