Vulnerabilities > CVE-2019-13047 - Missing Authorization vulnerability in Toaruos Project Toaruos

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

toaruos-project

CWE-862

NVD

Published: 2019-06-29

Updated: 2022-09-29

Summary

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access.

Vulnerable Configurations

Part	Description	Count
OS	Toaruos_Project Toaruos Project Toaruos 0.1 Toaruos Project Toaruos 0.2 Toaruos Project Toaruos 0.3 Toaruos Project Toaruos 0.4 Toaruos Project Toaruos 0.5 Toaruos Project Toaruos 0.6 Toaruos Project Toaruos 0.7 Toaruos Project Toaruos 0.7.0 Toaruos Project Toaruos 0.7.1 Toaruos Project Toaruos 0.7.2 Toaruos Project Toaruos 0.8 Toaruos Project Toaruos 0.9 Toaruos Project Toaruos 0.10 Toaruos Project Toaruos 0.10.0 Toaruos Project Toaruos 0.10.1 Toaruos Project Toaruos 0.11.0 Toaruos Project Toaruos 0.11.1 Toaruos Project Toaruos 0.12.0 Toaruos Project Toaruos 0.13.0 Toaruos Project Toaruos 0.14.0 Toaruos Project Toaruos 0.14.1 Toaruos Project Toaruos 0.99.0 Toaruos Project Toaruos 0.99.1 Toaruos Project Toaruos 0.99.2 Toaruos Project Toaruos 0.99.3 Toaruos Project Toaruos 0.99.4 Toaruos Project Toaruos 0.99.5 Toaruos Project Toaruos 0.99.6 Toaruos Project Toaruos 0.99.7 Toaruos Project Toaruos 0.99.8 Toaruos Project Toaruos 0.99.9 Toaruos Project Toaruos 0.99.10 Toaruos Project Toaruos 0.99.11 Toaruos Project Toaruos 0.99.12 Toaruos Project Toaruos 0.99.13 Toaruos Project Toaruos 0.99.14 Toaruos Project Toaruos 0.99.15 Toaruos Project Toaruos 0.99.16 Toaruos Project Toaruos 0.99.17 Toaruos Project Toaruos 0.99.18 Toaruos Project Toaruos 0.99.19 Toaruos Project Toaruos 0.99.20 Toaruos Project Toaruos 0.99.21 Toaruos Project Toaruos 0.99.22 Toaruos Project Toaruos 0.99.23 Toaruos Project Toaruos 0.99.24 Toaruos Project Toaruos 0.99.25 Toaruos Project Toaruos 0.99.26 Toaruos Project Toaruos 0.99.27 Toaruos Project Toaruos 1.0 Toaruos Project Toaruos 1.0.0 Toaruos Project Toaruos 1.0.1 Toaruos Project Toaruos 1.0.2 Toaruos Project Toaruos 1.0.3 Toaruos Project Toaruos 1.0.4 Toaruos Project Toaruos 1.1.0 Toaruos Project Toaruos 1.1.1 Toaruos Project Toaruos 1.1.2 Toaruos Project Toaruos 1.2.0 Toaruos Project Toaruos 1.2.1 Toaruos Project Toaruos 1.2.2 Toaruos Project Toaruos 1.2.3 Toaruos Project Toaruos 1.5.0 Toaruos Project Toaruos 1.6.0 Toaruos Project Toaruos 1.6.1 Toaruos Project Toaruos 1.7.0 Toaruos Project Toaruos 1.8.0 Toaruos Project Toaruos 1.8.1 Toaruos Project Toaruos 1.8.2 Toaruos Project Toaruos 1.9.0 Toaruos Project Toaruos 1.9.1 Toaruos Project Toaruos 1.9.2 Toaruos Project Toaruos 1.9.3 Toaruos Project Toaruos 1.9.4 Toaruos Project Toaruos 1.9.5 Toaruos Project Toaruos 1.10.0 Toaruos Project Toaruos 1.10.1 Toaruos Project Toaruos 1.10.2 Toaruos Project Toaruos 1.10.3 Toaruos Project Toaruos 1.10.4 Toaruos Project Toaruos 1.10.5 Toaruos Project Toaruos 1.10.6 Toaruos Project Toaruos 1.10.7 Toaruos Project Toaruos 1.10.8 Toaruos Project Toaruos 1.10.9	85

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc.c