NVD Vulnerability Detail

CVE-2020-8933

Summary	A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems. Within an lxc container, it is possible to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the "lxd" user from the OS Login entry.
Publication Date	June 22, 2020, 11:15 p.m.
Registration Date	Jan. 26, 2021, 12:02 p.m.
Last Update	Nov. 21, 2024, 2:39 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:google:guest-oslogin::::::::		20190304.00	20200507.00

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00037.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00037.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00047.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00047.html	Mailing List Third Party Advisory
5	https://cloud.google.com/support/bulletins/#gcp-2020-008	Vendor Advisory
6	https://cloud.google.com/support/bulletins/#gcp-2020-008	Vendor Advisory
7	https://github.com/GoogleCloudPlatform/guest-oslogin/pull/29	Patch Third Party Advisory
8	https://github.com/GoogleCloudPlatform/guest-oslogin/pull/29	Patch Third Party Advisory
9	https://gitlab.com/gitlab-com/gl-security/gl-redteam/red-team-tech-notes/-/tree/master/oslogin-privesc-june-2020	Exploit Third Party Advisory
10	https://gitlab.com/gitlab-com/gl-security/gl-redteam/red-team-tech-notes/-/tree/master/oslogin-privesc-june-2020	Exploit Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-276	不適切なデフォルトパーミッション	https://cwe.mitre.org/data/definitions/276.html

JVN Vulnerability Information

Google Cloud Platform guest-oslogin における不適切なデフォルトパーミッションに関する脆弱性

Title	Google Cloud Platform guest-oslogin における不適切なデフォルトパーミッションに関する脆弱性
Summary	Google Cloud Platform guest-oslogin には、不適切なデフォルトパーミッションに関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 19, 2020, midnight
Registration Date	Aug. 5, 2020, 4:48 p.m.
Last Update	Aug. 5, 2020, 4:48 p.m.

Affected System

Google

guest-oslogin 20190304 から 20200507

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-8933	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8933
National Vulnerability Database (NVD)
2	CVE-2020-8933	https://nvd.nist.gov/vuln/detail/CVE-2020-8933

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-276	https://cwe.mitre.org/data/definitions/276.html

ベンダー情報

No	Name	URL
GitHub
1	Remove OS Login users from admin groups. #29	https://github.com/GoogleCloudPlatform/guest-oslogin/pull/29
Google
2	GCP-2020-008	https://cloud.google.com/support/bulletins/#gcp-2020-008

Change Log

No	Changed Details	Date of change
1	[2020年08月05日] 掲載	Aug. 5, 2020, 4:48 p.m.