github - ghsa-377c-pvc8-rpq3

GHSA-377C-PVC8-RPQ3

Vulnerability from github – Published: 2022-05-24 16:52 – Updated: 2022-05-24 16:52

Details

** DISPUTED ** In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access. NOTE: the vendor disputes the significance of this finding; the discoverer was reportedly told that the Steam threat model excludes "Attacks that require physical access to the user's device" and "Attacks that require the ability to drop files in arbitrary locations on the user's filesystem" (which might apply to the attacker's ability to create links under HKLM\SOFTWARE\Wow6432Node\Valve\Steam\Apps).

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2019-14743"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-08-07T15:15:00Z",
    "severity": "HIGH"
  },
  "details": "** DISPUTED ** In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access. NOTE: the vendor disputes the significance of this finding; the discoverer was reportedly told that the Steam threat model excludes \"Attacks that require physical access to the user\u0027s device\" and \"Attacks that require the ability to drop files in arbitrary locations on the user\u0027s filesystem\" (which might apply to the attacker\u0027s ability to create links under HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam\\Apps).",
  "id": "GHSA-377c-pvc8-rpq3",
  "modified": "2022-05-24T16:52:49Z",
  "published": "2022-05-24T16:52:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14743"
    },
    {
      "type": "WEB",
      "url": "https://amonitoring.ru/article/steamclient-0day"
    },
    {
      "type": "WEB",
      "url": "https://github.com/alexanderbittner/steam-privesc"
    },
    {
      "type": "WEB",
      "url": "https://habr.com/ru/company/pm/blog/462479"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2019-14743 (GCVE-0-2019-14743)

Vulnerability from cvelistv5 – Published: 2019-08-07 14:05 – Updated: 2024-08-05 00:26

Summary

In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://amonitoring.ru/article/steamclient-0day/	x_refsource_MISC
	https://habr.com/ru/company/pm/blog/462479/	x_refsource_MISC
	https://github.com/alexanderbittner/steam-privesc/	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:26:38.628Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://amonitoring.ru/article/steamclient-0day/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://habr.com/ru/company/pm/blog/462479/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/alexanderbittner/steam-privesc/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-05T16:39:03",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://amonitoring.ru/article/steamclient-0day/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://habr.com/ru/company/pm/blog/462479/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/alexanderbittner/steam-privesc/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-14743",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://amonitoring.ru/article/steamclient-0day/",
              "refsource": "MISC",
              "url": "https://amonitoring.ru/article/steamclient-0day/"
            },
            {
              "name": "https://habr.com/ru/company/pm/blog/462479/",
              "refsource": "MISC",
              "url": "https://habr.com/ru/company/pm/blog/462479/"
            },
            {
              "name": "https://github.com/alexanderbittner/steam-privesc/",
              "refsource": "MISC",
              "url": "https://github.com/alexanderbittner/steam-privesc/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-14743",
    "datePublished": "2019-08-07T14:05:50",
    "dateReserved": "2019-08-07T00:00:00",
    "dateUpdated": "2024-08-05T00:26:38.628Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-377C-PVC8-RPQ3

CVE-2019-14743 (GCVE-0-2019-14743)

Tags

Sightings

Nomenclature