CVE-2019-12575 - CVE House
Back to Database
Status published High CVE-2019-12575

A vulnerability in the London Trust Media Private Internet Access...

Vulnerability Description

A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The root_runner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts to load several libraries under /tmp/ruby-deploy.old/lib. A local unprivileged user can create a malicious library under this path to execute arbitrary code as the root user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12575

Credits & Attribution

No credits recorded in the NVD database.

References

More from londontrustmedia

View All →
CVE-2019-12579
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12578
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12577
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12576
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12574
A vulnerability in the London Trust Media Private Internet Access...
High 7.8

Affected Vendor

londontrustmedia

View all reports →

Affected Software

private internet access vpn client
Vulnerable Versions:
82

Timeline

Official Publish: July 11th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.