UBUNTU-CVE-2020-5291

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2020-5291
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5291.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-5291
Related
Published
2020-03-31T18:15:00Z
Modified
2020-03-31T18:15:00Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the bwrap --userns2 option can be used to make the setuid process keep running as root while being traceable. This can in turn be used to gain root permissions. Note that this only affects the combination of bubblewrap in setuid mode (which is typically used when unprivileged user namespaces are not supported) and the support of unprivileged user namespaces. Known to be affected are: * Debian testing/unstable, if unprivileged user namespaces enabled (not default) * Debian buster-backports, if unprivileged user namespaces enabled (not default) * Arch if using linux-hardened, if unprivileged user namespaces enabled (not default) * Centos 7 flatpak COPR, if unprivileged user namespaces enabled (not default) This has been fixed in the 0.4.1 release, and all affected users should update.

References

Affected packages

Ubuntu:20.04:LTS / bubblewrap

Package

Name
bubblewrap
Purl
pkg:deb/ubuntu/bubblewrap?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.4.0-1ubuntu4

Affected versions

0.*

0.3.3-2
0.4.0-1
0.4.0-1ubuntu1
0.4.0-1ubuntu2
0.4.0-1ubuntu3

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "0.4.0-1ubuntu4",
            "binary_name": "bubblewrap"
        },
        {
            "binary_version": "0.4.0-1ubuntu4",
            "binary_name": "bubblewrap-dbgsym"
        }
    ]
}