CVE-2019-20044: apple ipados Improper Check for Dropped Privileges
CVSS: 7.8v3.1HighModified
AliasesALPINE-CVE-2019-20044MGASA-2020-0107RHSA-2020:0853RHSA-2020:0892RHSA-2020:0903RHSA-2020:0978UBUNTU-CVE-2019-20044DEBIAN-CVE-2019-20044DLA-2117-1
Published 24-02-2020Last modified 05-08-2024
Vulnerability summary
CVE-2019-20044 is a high (CVSS 7.8) Improper Check for Dropped Privileges vulnerability in apple ipados. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 41.5% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
0.50%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 8 · Related 7Timeline
- 24-02-2020PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
CVSS metrics
6 scores · 5 sources · 2 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
0.00 pp
From 0.50% on 21-09-2026
21-09-202621-10-2026
EPSS score0.50%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Apple5 products
- ipados< 13.5
- iphone_os< 13.5
- mac_os_x< 10.15.5 | ≥ 10.13.0, < 10.13.6 | ≥ 10.14.0, < 10.14.6 | ≥ 10.15, < 10.15.5 | 10.13.6 | 10.13.6:security_update_2018-002 | 10.13.6:security_update_2018-003 | 10.13.6:security_update_2019-001 | 10.13.6:security_update_2019-002 | 10.13.6:security_update_2019-003 | 10.13.6:security_update_2019-004 | 10.13.6:security_update_2019-005 | 10.13.6:security_update_2019-006 | 10.13.6:security_update_2019-007 | 10.13.6:security_update_2020-001 | 10.13.6:security_update_2020-002 | 10.14.6 | 10.14.6:security_update_2019-001 | 10.14.6:security_update_2019-002 | 10.14.6:security_update_2019-004 | 10.14.6:security_update_2019-005 | 10.14.6:security_update_2019-006 | 10.14.6:security_update_2019-007 | 10.14.6:security_update_2020-001 | 10.14.6:security_update_2020-002
- tvos< 13.4.5
- watchos< 6.2.5
Redhat4 products
- zsh< 0:5.0.2-34.el7_7.2 | < 0:4.3.11-11.el6_10 | < 0:5.5.1-6.el8_1.2 | < 0:5.5.1-6.el8_0.2
- zsh-debuginfo< 0:5.0.2-34.el7_7.2 | < 0:4.3.11-11.el6_10 | < 0:5.5.1-6.el8_1.2 | < 0:5.5.1-6.el8_0.2
- zsh-debugsource< 0:5.5.1-6.el8_1.2 | < 0:5.5.1-6.el8_0.2
- zsh-html< 0:5.0.2-34.el7_7.2 | < 0:4.3.11-11.el6_10 | < 0:5.5.1-6.el8_1.2 | < 0:5.5.1-6.el8_0.2
Debian2 products
- zsh< 5.8-1 | < 5.0.7-5+deb8u1
- debian_linuxEOL8.0 | 9.0
Alpine1 product
- zsh< 5.8-r0
Fedoraproject1 product
- fedoraEOL30 | 31
Mageia1 product
- zsh< 5.7.1-1.1.mga7
Ubuntu1 product
- zsh< 5.1.1-1ubuntu2.3+esm1 | < 5.4.2-3ubuntu3.2 | All versions (No fix recorded)
Zsh1 product
- zsh< 5.8
8 vendors · 16 products
References
40 links
lists.debian.org/debian-lts-announce/2020/03/msg00004.htmlMailing ListX Refsource MLISTThird Party Advisory
Show all 40 references
- lists.debian.org/debian-lts-announce/2020/12/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
