CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD

published October 18, 2019

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02218 · 82.5th percentile
Published
2019-10-18T15:44Z
EPSS history
Timeline
  • 18 OCT 15:44Z
    An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD
    cvelistv5