Bug 1719141 (CVE-2019-12450) - CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress
Summary: CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does no...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2019-12450
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1719142 1719268 1719270 1722099 1722101 1722280
Blocks: 1719146
TreeView+ depends on / blocked
 
Reported: 2019-06-11 07:16 UTC by Marian Rehak
Modified: 2023-12-15 16:33 UTC (History)
21 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-11-06 00:52:49 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2019:3530 0 None None None 2019-11-05 21:06:52 UTC
Red Hat Product Errata RHSA-2020:3978 0 None None None 2020-09-29 20:17:33 UTC

Description Marian Rehak 2019-06-11 07:16:43 UTC 
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 creates new files with default permissions and set the correct permissions after the operation is finished. This might cause that the files can be accessible by more users during the operation than expected.

Upstream Commit:

https://gitlab.gnome.org/GNOME/glib/commit/d8f8f4d637ce43f8699ba94c9b7648beda0ca174
Comment 1 Marian Rehak 2019-06-11 07:17:01 UTC 
Created glib2 tracking bugs for this issue:

Affects: fedora-all [bug 1719142]
Comment 2 msiddiqu 2019-06-11 11:46:11 UTC 
Created mingw-glib2 tracking bugs for this issue:

Affects: fedora-all [bug 1719268]
Comment 3 msiddiqu 2019-06-11 11:47:14 UTC 
Created mingw-glib2 tracking bugs for this issue:

Affects: epel-7 [bug 1719270]
Comment 9 Marco Benatto 2019-06-19 18:58:54 UTC 
Statement:

This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.

Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.
Comment 11 Marco Benatto 2019-06-19 21:53:13 UTC 
There's a flaw when copying a file using g_file_copy() glib's API function where gio library firstly create the destination file with default permissions before the copy ends. The bug is located at file_copy_fallback() which when called under certain circumstances creates new files using default permissions instead the same of origin file, the right permissions are set once the data copy ends. While the data copy is ongoing the file may be improper accessible by users which doesn't have permissions to read or write to it, compromising data confidentiality and integrity.
Comment 13 errata-xmlrpc 2019-11-05 21:06:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2019:3530 https://access.redhat.com/errata/RHSA-2019:3530
Comment 14 Product Security DevOps Team 2019-11-06 00:52:49 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2019-12450
Comment 16 errata-xmlrpc 2020-09-29 20:17:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2020:3978 https://access.redhat.com/errata/RHSA-2020:3978
Note You need to log in before you can comment on or make changes to this bug.