CVE-2019-12779

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.

Metrics

CVSS 3.0 7.1/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00017.html
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00031.html
http://www.securityfocus.com/bid/108691Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3610
https://bugzilla.redhat.com/show_bug.cgi?id=1695948Exploit, Patch, Third Party Advisory, VDB Entry
https://github.com/ClusterLabs/libqb/issues/338Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.4Release Notes, Third Party Advisory
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.5Release Notes, Third Party Advisory
https://security.gentoo.org/glsa/202107-03
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00017.html
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00031.html
http://www.securityfocus.com/bid/108691Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3610
https://bugzilla.redhat.com/show_bug.cgi?id=1695948Exploit, Patch, Third Party Advisory, VDB Entry
https://github.com/ClusterLabs/libqb/issues/338Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.4Release Notes, Third Party Advisory
https://github.com/ClusterLabs/libqb/releases/tag/v1.0.5Release Notes, Third Party Advisory
https://security.gentoo.org/glsa/202107-03

Timeline

Published: Jun 7, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-12787.8An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of Privile CVE-2019-127809.8The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. CVE-2019-127815.3An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS w CVE-2019-127828.1An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with CVE-2019-127836.1An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which users will be redirect CVE-2019-127848.8An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the login form can accept submissions from external websites. In c CVE-2019-127868.8An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via CVE-2019-127878.8An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via CVE-2019-127887.8An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges). It is possible to p CVE-2019-127896.8An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins CVE-2019-127907.8In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote atta CVE-2019-127918.8A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regul