Bug 1492841 (CVE-2017-14483) - CVE-2017-14483 python-flower: Privilege escalation via PID file manipulation
Summary: CVE-2017-14483 python-flower: Privilege escalation via PID file manipulation
Keywords:
Status: CLOSED UPSTREAM
Alias: CVE-2017-14483
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1492842
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-18 17:45 UTC by Pedro Sampaio
Modified: 2019-09-29 14:22 UTC (History)
1 user (show)

Fixed In Version: python-flower 0.9.1-r1
Clone Of:
Environment:
Last Closed: 2019-06-08 03:25:37 UTC
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2017-09-18 17:45:35 UTC 
Flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command. 

Upstream patch:

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=54fcfe2d700b35705ce973ef2dab40212854b3b3

References:

https://bugs.gentoo.org/631020
Comment 1 Pedro Sampaio 2017-09-18 17:46:01 UTC 
Created python-flower tracking bugs for this issue:

Affects: fedora-all [bug 1492842]
Comment 2 Product Security DevOps Team 2019-06-08 03:25:37 UTC 
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
Note You need to log in before you can comment on or make changes to this bug.