Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-1111

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Published

2018-05-17T16:29:00.217

Last Modified

2024-11-21T03:59:12.207

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Access Vector: ADJACENT_NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

5.5

Impact Score

10.0

Weaknesses

Type: Primary
CWE-77
Type: Secondary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	fedoraproject	fedora	26	Yes
Operating System	fedoraproject	fedora	27	Yes
Operating System	fedoraproject	fedora	28	Yes
Application	redhat	enterprise_virtualization	4.0	Yes
Application	redhat	enterprise_virtualization	4.2	Yes
Application	redhat	enterprise_virtualization_host	4.0	Yes
Operating System	redhat	enterprise_linux	6.0	Yes
Operating System	redhat	enterprise_linux	6.4	Yes
Operating System	redhat	enterprise_linux	6.5	Yes
Operating System	redhat	enterprise_linux	6.6	Yes
Operating System	redhat	enterprise_linux	6.7	Yes
Operating System	redhat	enterprise_linux	7.0	Yes
Operating System	redhat	enterprise_linux	7.2	Yes
Operating System	redhat	enterprise_linux	7.3	Yes
Operating System	redhat	enterprise_linux	7.4	Yes
Operating System	redhat	enterprise_linux	7.5	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_desktop	7.0	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_server	7.0	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Operating System	redhat	enterprise_linux_workstation	7.0	Yes

References

http://www.securityfocus.com/bid/104195 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1040912 Third Party Advisory, VDB Entry ([email protected])
https://access.redhat.com/errata/RHSA-2018:1453 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1454 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1455 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1456 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1457 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1458 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1459 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1460 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1461 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:1524 Vendor Advisory ([email protected])
https://access.redhat.com/security/vulnerabilities/3442151 Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111 Issue Tracking, Vendor Advisory ([email protected])
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDCLLCHYFFXW354HMB5QBXOQOY5BH2EJ/ ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDJA4QRR74TMXW34Q3DYYFPVBYRTJBI7/ ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMTTB54QNTPD2SK6UL32EVQHMZP6BUUD/ ([email protected])
https://www.exploit-db.com/exploits/44652/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.exploit-db.com/exploits/44890/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.tenable.com/security/tns-2018-10 ([email protected])
http://www.securityfocus.com/bid/104195 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1040912 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1453 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1454 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1455 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1456 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1457 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1458 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1459 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1460 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1461 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:1524 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/vulnerabilities/3442151 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDCLLCHYFFXW354HMB5QBXOQOY5BH2EJ/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDJA4QRR74TMXW34Q3DYYFPVBYRTJBI7/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMTTB54QNTPD2SK6UL32EVQHMZP6BUUD/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/44652/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/44890/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.tenable.com/security/tns-2018-10 (af854a3a-2127-422b-91ae-364da2661108)