CVE-2013-1820
published 2019-11-08CVE-2013-1820: tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.38%
29.9th percentile
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tuned | — | — |
| fedoraproject | fedora | — | — |
| redhat | tuned | < 2.0.2 | 2.0.2 |
| tuned | tuned | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5h65-vpv9-88m6: tuned before 2
ghsa_unreviewed·2022-05-24
CVE-2013-1820 [MEDIUM] GHSA-5h65-vpv9-88m6: tuned before 2
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
Debian
CVE-2013-1820: tuned - tuned before 2.x allows local users to kill running processes due to insecure pe...
vendor_debian·2013·CVSS 5.5
CVE-2013-1820 [MEDIUM] CVE-2013-1820: tuned - tuned before 2.x allows local users to kill running processes due to insecure pe...
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
Red Hat
tuned: insecure permissions of pmqos-static.pid
vendor_redhat·2012-02-26·CVSS 5.5
CVE-2013-1820 [MEDIUM] tuned: insecure permissions of pmqos-static.pid
tuned: insecure permissions of pmqos-static.pid
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
Package: tuned (Red Hat Enterprise Linux 6) - Will not fix
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid
bugzilla·2013-03-05·CVSS 5.5
CVE-2013-1820 [MEDIUM] CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid
CVE-2013-1820 tuned: insecure permissions of pmqos-static.pid
Finke Lamein reported that tuned's ktune service, which calls pmqos-static.py when the latency-performance profile is selected, would create its PID file with insecure permissions (0666). A local user could use this flaw to kill arbitrary running processes when the ktune service is stopped.
NOTE: the latency-performance profile is not a default, and requires root privileges to enable ("tuned-adm profile latency-performance"). As well, ktune is not enabled by default.
Discussion:
This is fixed upstream in the 1.x branch:
http://git.fedorahosted.org/cgit/tuned.git/patch/?id=c89ad2149ce0425ff790e9c44f5b682e1eee4edc
This does not affect 2.2.x, so Fedora 18 is not affected by this issue, however it does affect Fedora 17 (tuned/
Bugzilla
CVE-2012-6136 CVE-2013-1820 tuned: multiple insecure permissions of pid files [fedora-17]
bugzilla·2013-03-05·CVSS 5.5
CVE-2012-6136 [MEDIUM] CVE-2012-6136 CVE-2013-1820 tuned: multiple insecure permissions of pid files [fedora-17]
CVE-2012-6136 CVE-2013-1820 tuned: multiple insecure permissions of pid files [fedora-17]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
fedora-17 track
Bugzilla
CVE-2013-1820 /var/run/tuned/pmqos-static.pid created with insecure permissions [rhel-6.5]
bugzilla·2013-02-26·CVSS 5.5
CVE-2013-1820 [MEDIUM] CVE-2013-1820 /var/run/tuned/pmqos-static.pid created with insecure permissions [rhel-6.5]
CVE-2013-1820 /var/run/tuned/pmqos-static.pid created with insecure permissions [rhel-6.5]
Description of problem:
Version-Release number of selected component (if applicable):
tuned-0.2.19-11.el6.1.noarch
How reproducible:
Always
Steps to Reproduce:
1. service ktune stop
2. rm /var/run/tuned/pmqos-static.pid
3. service ktune start
4. ll /var/run/tuned/pmqos-static.pid
Actual results:
-rw-rw-rw-. 1 root root 5 Feb 26 09:34 pmqos-static.pid
Expected results:
-rw-r--r--. 1 root root 5 Feb 26 09:34 pmqos-static.pid
Additional info:
this is highly related to https://bugzilla.redhat.com/show_bug.cgi?id=845336
Discussion:
Created attachment 703534
Proposed fix
Thanks for the report, proposed fix is attached.
---
not sure if I need to confirm, but the fix seems fine
---
Since the p
https://bugzilla.redhat.com/show_bug.cgi?id=918233https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1820https://security-tracker.debian.org/tracker/CVE-2013-1820https://bugzilla.redhat.com/show_bug.cgi?id=918233https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1820https://security-tracker.debian.org/tracker/CVE-2013-1820
2019-11-08
Published