Skip to content
OpenAdvisories
Medium · 4.6 CVE-2020-9759 EUVD-2020-30538GHSA-j24f-gw9v-x4vp

webOS TV Emulator privilege escalation vulnerability

Published Mar 23, 2020 · Updated Sep 17, 2024 · Assigned by mitre

Description

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 weechat 2.7.1-1 —
Debian 13 weechat 2.7.1-1 —
Debian 12 weechat 2.7.1-1 —
Debian 9 weechat 1.6-1+deb9u3 DLA-2770-1
Debian 8 weechat 1.0.1-1+deb8u3 DLA-2157-1
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS weechat 2.8-1ubuntu0.1~esm1 USN-5258-1
Ubuntu Pro 18.04 LTS weechat 1.9.1-1ubuntu1+esm1 USN-5258-1
Ubuntu Pro 16.04 LTS weechat 1.4-2ubuntu0.1+esm1 USN-5258-1

Advisories 3

References