KPMCore: Root privilege escalation — GLSA 202011-03

A vulnerability in kpmcore could result in privilege escalation.

Affected packages

Background

KPMcore, the KDE Partition Manager core, is a library for examining and modifying partitions, disk devices, and filesystems on a Linux system. It provides a unified programming interface over top of (external) system-manipulation tools.

Description

Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab.

Impact

An attacker could esclate privileges to root by exploiting this vulnerability.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-libs/kpmcore-4.2.0"
 

References

• CVE-2020-27187
• Upstream advisory

Release date
November 03, 2020

Latest revision
November 03, 2020: 1

Severity
normal

Exploitable
local

Bugzilla entries

• 749822