CVE-2019-15901 in doas
Summary
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
09/03/2019
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 143954 | slicer69 doas input validation | 20 | Not defined | Official fix | CVE-2019-15901 |