CVE-2017-14730 : The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link.

Published 2017-09-25 17:29:01

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-14730

Elasticsearch » Logstash » Version: 5.0.2
cpe:2.3:a:elasticsearch:logstash:5.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.1.2
cpe:2.3:a:elasticsearch:logstash:5.1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.4.2
cpe:2.3:a:elasticsearch:logstash:5.4.2:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.5.0
cpe:2.3:a:elasticsearch:logstash:5.5.0:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.2.1
cpe:2.3:a:elasticsearch:logstash:5.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.3.0
cpe:2.3:a:elasticsearch:logstash:5.3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.3.1
cpe:2.3:a:elasticsearch:logstash:5.3.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.3.2
cpe:2.3:a:elasticsearch:logstash:5.3.2:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.5.1
cpe:2.3:a:elasticsearch:logstash:5.5.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.5.2
cpe:2.3:a:elasticsearch:logstash:5.5.2:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.6.0
cpe:2.3:a:elasticsearch:logstash:5.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.0.0
cpe:2.3:a:elasticsearch:logstash:5.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.0.1
cpe:2.3:a:elasticsearch:logstash:5.0.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.1.1
cpe:2.3:a:elasticsearch:logstash:5.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.2.0
cpe:2.3:a:elasticsearch:logstash:5.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.4.1
cpe:2.3:a:elasticsearch:logstash:5.4.1:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A
Elasticsearch » Logstash » Version: 5.4.3
cpe:2.3:a:elasticsearch:logstash:5.4.3:*:*:*:*:*:*:*
Matching versions
When used together with: Gentoo » Linux » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-14730

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-14730

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-14730

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-14730

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=18f97c851c209f291b31ae7a902719f1c17c79fa

repo/gentoo.git - Official Gentoo ebuild repository
Third Party Advisory
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bbd6cb398c1740c68e9b1b78340c887c58c1fbda

repo/gentoo.git - Official Gentoo ebuild repository
Third Party Advisory
https://github.com/gentoo/gentoo/pull/5665

app-admin/logstash-bin: bump to 5.5.3/5.6.1, drop old by hydrapolic · Pull Request #5665 · gentoo/gentoo · GitHub
Third Party Advisory
https://bugs.gentoo.org/628558

628558 – (CVE-2017-14730) app-admin/logstash-bin: root privilege escalation via init script
Third Party Advisory

Jump to

Vulnerability Details : CVE-2017-14730

Products affected by CVE-2017-14730

Exploit prediction scoring system (EPSS) score for CVE-2017-14730

CVSS scores for CVE-2017-14730

CWE ids for CVE-2017-14730

References for CVE-2017-14730