An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3837-1 advisory.

  - An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to     3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by     using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling     terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This     is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
    (CVE-2019-11460)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for flatpak fixes the following issues :

Security issues fixed :

  - CVE-2019-8308: Fixed a potential sandbox escape via     /proc (bsc#1125431).

  - CVE-2019-11460: Fixed a compromised thumbnailer may     escape the bubblewrap sandbox used to confine     thumbnailers by using the TIOCSTI ioctl (bsc#1133043).

  - CVE-2019-11461: Fixed a compromised thumbnailer may     escape the bubblewrap sandbox used to confine     thumbnailers by using the TIOCSTI ioctl (bsc#1133041).

This update was imported from the SUSE:SLE-15:Update update project.

The remote host is affected by the vulnerability described in GLSA-201908-28 (GNOME desktop library: Security bypass)

    A vulnerability was discovered in the GNOME desktop library which allows       an attacker to escape the sandbox.
  Impact :

    A local attacker could possibly bypass sandbox protection.
  Workaround :

    There is no known workaround at this time.

This update for flatpak fixes the following issues :

Security issues fixed :

CVE-2019-8308: Fixed a potential sandbox escape via /proc (bsc#1125431).

CVE-2019-11460: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133043).

CVE-2019-11461: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133041).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that gnome-desktop incorrectly confined thumbnailers. If a user were tricked into downloading a malicious image file, a remote attacker could possibly combine this issue with another vulnerability to escape the sandbox and execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
170234	openSUSE 15 Security Update : gnome-desktop (SUSE-SU-2022:3837-1)	Nessus	SuSE Local Security Checks	critical
128454	openSUSE Security Update : flatpak (openSUSE-2019-2038)	Nessus	SuSE Local Security Checks	critical
128443	GLSA-201908-28 : GNOME desktop library: Security bypass	Nessus	Gentoo Local Security Checks	critical
128048	SUSE SLED15 / SLES15 Security Update : flatpak (SUSE-SU-2019:2185-1)	Nessus	SuSE Local Security Checks	critical
125476	Ubuntu 18.04 LTS : gnome-desktop vulnerability (USN-3994-1)	Nessus	Ubuntu Local Security Checks	critical
125300	Fedora 29 : gnome-desktop3 (2019-992622684b)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2019-11460

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical