Vulnerability in Sgi Performance Co-Pilot
CVE-2023-6917
A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.
Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.002 (8.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 9th percentile — 8.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Sgi Performance Co-Pilot
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9 — versions 0:6.2.0-1.el9
- Red Hat Enterprise Linux — versions 9.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/errata/RHSA-2024:2213 (vendor-advisory, Third Party Advisory)
- access.redhat.com/security/cve/CVE-2023-6917 (Third Party Advisory, vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2023-6917?
- CVE-2023-6917 is a medium-severity vulnerability in Sgi Performance Co-Pilot, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 6.0/10. Published 2024-02-28.
- How severe is CVE-2023-6917?
- Medium severity. CVSS v3 base score is 6.0 out of 10.
- Is CVE-2023-6917 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.