Description
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- SUSE / Container suse/sle-micro/5.5:latest? – 1.9.14-150400.3.11.1
- SUSE / Container suse/sle-micro-rancher/5.3:latest? – 1.9.14-150400.3.11.1
- SUSE / Container suse/sle-micro-rancher/5.4:latest? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-BYOS? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-BYOS-Azure? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-BYOS-EC2? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-BYOS-GCE? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened-BYOS? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-Azure? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-EC2? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-GCE? – 1.9.14-150400.3.11.1
- SUSE / Image SLES15-SP4-SAP-Hardened-GCE? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Desktop 15 SP7? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise High Performance Computing 15 SP7? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise Micro 5.3? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Micro 5.4? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Micro 5.5? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Module for Basesystem 15 SP7? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise Server 15 SP4-LTSS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Server 15 SP5-LTSS? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Server 15 SP6-LTSS? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise Server 15 SP7? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP4? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP5? – 1.9.14-150400.3.11.1
- SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6? – 1.9.14-150600.11.6.1
- SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP7? – 1.9.14-150600.11.6.1
- SUSE / SUSE Manager Proxy LTS 4.3? – 1.9.14-150400.3.11.1
- SUSE / SUSE Manager Retail Branch Server LTS 4.3? – 1.9.14-150400.3.11.1
- SUSE / SUSE Manager Server LTS 4.3? – 1.9.14-150400.3.11.1