CVE-2019-13313

HOCH 7.8CVE-2019-13313 · Published 05/07/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-13313 ist eine Schwachstelle (HOCH (CVSS 7.8)) in libosinfo (libosinfo).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.43%, höher als bei 37.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
libosinfo libosinfo	`= 1.5.0`	No fix yet

Description

libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.

References

openwall.com/lists/oss-security/2019/07/08/3 · Mailing List
access.redhat.com/errata/RHSA-2019:3387 · Third Party Advisory
gitlab.com/libosinfo/libosinfo/-/tags · Release Notes
gitlab.com/libosinfo/libosinfo/blob/master/NEWS · Release Notes
libosinfo.org/download · Release Notes
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AZU4IPPIR73NYC6E733QR26O5ZI6MMKJ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEZUZKC6YK4E3NXM7XKZOXY5X5PJSPIR
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4AD73NGYBV7GYT4LFC3TC7AYBWOJTG4
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT44EYZZQFTK7XM6GKCYC4WUE7HYZVXM

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free