github - ghsa-377c-pvc8-rpq3

ghsa-377c-pvc8-rpq3

Vulnerability from github

Published

2022-05-24 16:52

Modified

2022-05-24 16:52

Details

** DISPUTED ** In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access. NOTE: the vendor disputes the significance of this finding; the discoverer was reportedly told that the Steam threat model excludes "Attacks that require physical access to the user's device" and "Attacks that require the ability to drop files in arbitrary locations on the user's filesystem" (which might apply to the attacker's ability to create links under HKLM\SOFTWARE\Wow6432Node\Valve\Steam\Apps).

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2019-14743"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-08-07T15:15:00Z",
    "severity": "HIGH"
  },
  "details": "** DISPUTED ** In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access. NOTE: the vendor disputes the significance of this finding; the discoverer was reportedly told that the Steam threat model excludes \"Attacks that require physical access to the user\u0027s device\" and \"Attacks that require the ability to drop files in arbitrary locations on the user\u0027s filesystem\" (which might apply to the attacker\u0027s ability to create links under HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam\\Apps).",
  "id": "GHSA-377c-pvc8-rpq3",
  "modified": "2022-05-24T16:52:49Z",
  "published": "2022-05-24T16:52:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14743"
    },
    {
      "type": "WEB",
      "url": "https://amonitoring.ru/article/steamclient-0day"
    },
    {
      "type": "WEB",
      "url": "https://github.com/alexanderbittner/steam-privesc"
    },
    {
      "type": "WEB",
      "url": "https://habr.com/ru/company/pm/blog/462479"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2019-14743 (GCVE-0-2019-14743)

Vulnerability from cvelistv5

Published

2019-08-07 14:05

Modified

2024-08-05 00:26

Severity ?

CWE

Summary

In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.

References

▼	URL	Tags
	https://amonitoring.ru/article/steamclient-0day/	x_refsource_MISC
	https://habr.com/ru/company/pm/blog/462479/	x_refsource_MISC
	https://github.com/alexanderbittner/steam-privesc/	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:26:38.628Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://amonitoring.ru/article/steamclient-0day/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://habr.com/ru/company/pm/blog/462479/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/alexanderbittner/steam-privesc/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-05T16:39:03",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://amonitoring.ru/article/steamclient-0day/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://habr.com/ru/company/pm/blog/462479/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/alexanderbittner/steam-privesc/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-14743",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Valve Steam Client for Windows through 2019-08-07, HKLM\\SOFTWARE\\Wow6432Node\\Valve\\Steam has explicit \"Full control\" for the Users group, which allows local users to gain NT AUTHORITY\\SYSTEM access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://amonitoring.ru/article/steamclient-0day/",
              "refsource": "MISC",
              "url": "https://amonitoring.ru/article/steamclient-0day/"
            },
            {
              "name": "https://habr.com/ru/company/pm/blog/462479/",
              "refsource": "MISC",
              "url": "https://habr.com/ru/company/pm/blog/462479/"
            },
            {
              "name": "https://github.com/alexanderbittner/steam-privesc/",
              "refsource": "MISC",
              "url": "https://github.com/alexanderbittner/steam-privesc/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-14743",
    "datePublished": "2019-08-07T14:05:50",
    "dateReserved": "2019-08-07T00:00:00",
    "dateUpdated": "2024-08-05T00:26:38.628Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted