data/reports/GO-2020-0027.yaml

modules:
  - module: github.com/google/fscrypt
    versions:
      - fixed: 0.2.4
    vulnerable_at: 0.2.4-0.20180823175935-d4d88e16b54e
    packages:
      - package: github.com/google/fscrypt/pam
        symbols:
          - NewHandle
          - Handle.StopAsPamUser
          - Handle.StartAsPamUser
      - package: github.com/google/fscrypt/security
        symbols:
          - SetProcessPrivileges
          - setUids
          - setGids
          - setGroups
        derived_symbols:
          - FindKey
          - InsertKey
          - RemoveKey
          - UserKeyringID
description: |
    After dropping and then elevating process privileges euid, guid, and groups
    are not properly restored to their original values, allowing an unprivileged
    user to gain membership in the root group.
published: 2021-04-14T20:04:52Z
cves:
  - CVE-2018-6558
ghsas:
  - GHSA-qj26-7grj-whg3
references:
  - fix: https://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b
  - web: https://github.com/google/fscrypt/issues/77