CVE-2019-14514

An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu emulator contains a /system/bin/systemd binary that is run with root privileges on startup (this is unrelated to Red Hat's systemd init program, and is a closed-source proprietary tool that seems to be developed by Microvirt). This program opens TCP port 21509, presumably to receive installation-related commands from the host OS. Because everything after the installer:uninstall command is concatenated directly into a system() call, it is possible to execute arbitrary commands by supplying shell metacharacters.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

7.01% chance of exploitation in the next 30 days, 94th percentile

Published

2020-02-10

Updated

2024-08-05

Proof-of-concept exploits (1)

• seqred-s-a/cve-2019-145143★ · 2020-02-06

References

• CVE Record
• NVD entry

Related

• CVE-2019-14220
• CVE-2019-14326
• CVE-2020-10551
• CVE-2020-29007
• CVE-2019-14513
• CVE-2019-14517