Anolis OS update for idm:DL1 module

1) Race condition

EUVDB-ID: #VU58095

Risk: Low

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-25719

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to a race condition. A remote administrator can exploit the race and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

python3-yubico: before 1.3.2-9

python3-qrcode-core: before 5.1-12

python3-qrcode: before 5.1-12

python3-pyusb: before 1.0.0-9

python3-kdcproxy: before 0.4-5

python3-jwcrypto: before 0.5.0-1

python3-ipatests: before 4.9.6-10.0.1

python3-ipaserver: before 4.9.6-10.0.1

python3-ipalib: before 4.9.6-10.0.1

python3-ipaclient: before 4.9.6-10.0.1

python3-custodia: before 0.6.0-3

ipa-server-dns: before 4.9.6-10.0.1

ipa-server-common: before 4.9.6-10.0.1

ipa-selinux: before 4.9.6-10.0.1

ipa-python-compat: before 4.9.6-10.0.1

ipa-healthcheck-core: before 0.7-6

ipa-healthcheck: before 0.7-6

ipa-common: before 4.9.6-10.0.1

ipa-client-common: before 4.9.6-10.0.1

custodia: before 0.6.0-3

softhsm-devel: before 2.6.0-5

softhsm: before 2.6.0-5

slapi-nis: before 0.56.6-4

opendnssec: before 2.1.7-1

ipa-server-trust-ad: before 4.9.6-10.0.1

ipa-server: before 4.9.6-10.0.1

ipa-client-samba: before 4.9.6-10.0.1

ipa-client-epn: before 4.9.6-10.0.1

ipa-client: before 4.9.6-10.0.1

bind-dyndb-ldap: before 11.6-2

CPE2.3

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:o:openanolis:python3-yubico:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-qrcode-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-qrcode:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-pyusb:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-kdcproxy:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-jwcrypto:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-ipatests:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-ipaserver:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-ipalib:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-ipaclient:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:python3-custodia:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-server-dns:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-server-common:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-selinux:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-python-compat:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-healthcheck-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-healthcheck:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-common:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-client-common:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:custodia:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:softhsm-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:softhsm:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:slapi-nis:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:opendnssec:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-server-trust-ad:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-server:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-client-samba:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-client-epn:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:ipa-client:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:o:openanolis:bind-dyndb-ldap:*:*:*:*:*:anolis_os:*:*

External links

https://anas.openanolis.cn/errata/detail/ANSA-2022:0037

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.