NVD Vulnerability Detail

CVE-2020-35459

Summary	An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
Publication Date	Jan. 13, 2021, 12:15 a.m.
Registration Date	Jan. 26, 2021, 11:57 a.m.
Last Update	Nov. 21, 2024, 2:27 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:clusterlabs:crmsh::::::::			4.2.1

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:9.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.openwall.com/lists/oss-security/2021/01/12/3	Mailing List Patch Third Party Advisory
2	http://www.openwall.com/lists/oss-security/2021/01/12/3	Mailing List Patch Third Party Advisory
3	https://bugzilla.suse.com/show_bug.cgi?id=1179999	Issue Tracking Third Party Advisory
4	https://bugzilla.suse.com/show_bug.cgi?id=1179999	Issue Tracking Third Party Advisory
5	https://github.com/ClusterLabs/crmsh/blob/a403aa15f3ea575adfe5e43bf2a31c9f9094fcda/crmsh/history.py#L476	Patch Third Party Advisory
6	https://github.com/ClusterLabs/crmsh/blob/a403aa15f3ea575adfe5e43bf2a31c9f9094fcda/crmsh/history.py#L476	Patch Third Party Advisory
7	https://github.com/ClusterLabs/crmsh/releases	Release Notes Third Party Advisory
8	https://github.com/ClusterLabs/crmsh/releases	Release Notes Third Party Advisory
9	https://lists.debian.org/debian-lts-announce/2021/01/msg00021.html	Mailing List Third Party Advisory
10	https://lists.debian.org/debian-lts-announce/2021/01/msg00021.html	Mailing List Third Party Advisory
11	https://www.openwall.com/lists/oss-security/2021/01/12/3	Exploit Mailing List Third Party Advisory
12	https://www.openwall.com/lists/oss-security/2021/01/12/3	Exploit Mailing List Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-78	OSコマンド・インジェクション	https://cwe.mitre.org/data/definitions/78.html

JVN Vulnerability Information

ClusterLabs crmsh における OS コマンドインジェクションの脆弱性

Title	ClusterLabs crmsh における OS コマンドインジェクションの脆弱性
Summary	ClusterLabs crmsh には、OS コマンドインジェクションの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 16, 2020, midnight
Registration Date	Sept. 17, 2021, 3:39 p.m.
Last Update	Sept. 17, 2021, 3:39 p.m.

Affected System

Debian

Debian GNU/Linux

Cluster Labs

crmsh 4.2.1 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-35459	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35459
National Vulnerability Database (NVD)
2	CVE-2020-35459	https://nvd.nist.gov/vuln/detail/CVE-2020-35459

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-78	https://jvndb.jvn.jp/ja/cwe/CWE-78.html

ベンダー情報

No	Name	URL
Debian
1	[SECURITY] [DLA 2533-1] crmsh security update	https://lists.debian.org/debian-lts-announce/2021/01/msg00021.html
GitHub
2	crmsh	https://github.com/ClusterLabs/crmsh/blob/a403aa15f3ea575adfe5e43bf2a31c9f9094fcda/crmsh/history.py#L476
3	Release crmsh 4.3.1	https://github.com/ClusterLabs/crmsh/releases

その他

No	Name	URL
関連文書
1	Security issues in hawk2 and crmsh	https://www.openwall.com/lists/oss-security/2021/01/12/3

Change Log

No	Changed Details	Date of change
1	[2021年09月17日] 掲載	Sept. 17, 2021, 3:39 p.m.