Privilege escalation in Red Hat Virtualization Host and Red Hat Virtualization - CVE-2018-10875
Published: August 1, 2018
Vulnerability identifier: #VU14158
CSH Severity: Low
CVSS v4: 9.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]
CVE-ID: CVE-2018-10875
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists due to the system loads inventory variables from the current working directory when running an ad-hoc command. A local attacker can modify the variables and execute arbitrary code from those paths with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Red Hat Virtualization Host
Red Hat Virtualization
Red Hat Ansible Engine
ansible (Alpine package)
ansible-role-redhat-subscription (Red Hat package)
ansible (Red Hat package)
ansible
Fedora
SUSE Linux
Red Hat OpenStack
SUSE Package Hub for SUSE Linux Enterprise
Ansible
Red Hat Virtualization
Red Hat Ansible Engine
ansible (Alpine package)
ansible-role-redhat-subscription (Red Hat package)
ansible (Red Hat package)
ansible
Fedora
SUSE Linux
Red Hat OpenStack
SUSE Package Hub for SUSE Linux Enterprise
Ansible
How to mitigate CVE-2018-10875
Install update from vendor's website.
ansible (Alpine package) - update to 2.6.3-r0
Red Hat OpenStack - update to 12
ansible-role-redhat-subscription (Red Hat package) - update to 1.0.1-4.el7ost
ansible (Red Hat package) - update to 2.4.6.0-1.el7ae
Ansible - addressed in versions 2.5.6-1.el7ae, 2.6.1-1.el7ae
ansible - addressed in versions 2.6.1-1.el7, 2.6.1-1.fc27, 2.6.1-1.fc28
Red Hat OpenStack - update to 12
ansible-role-redhat-subscription (Red Hat package) - update to 1.0.1-4.el7ost
ansible (Red Hat package) - update to 2.4.6.0-1.el7ae
Ansible - addressed in versions 2.5.6-1.el7ae, 2.6.1-1.el7ae
ansible - addressed in versions 2.6.1-1.el7, 2.6.1-1.fc27, 2.6.1-1.fc28
External References
Related Security Bulletins
- Privilege escalation vulnerabilities in Red Hat Enterprise Virtualization
- Privilege escalation vulnerabilities in Red Hat Enterprise Virtualization
- OpenSUSE Linux update for ansible
- Red Hat update for ansible
- Red Hat update for ansible
- OpenSUSE Linux update for ansible
- Privilege escalation in ansible (Alpine package)
- Ansible Engine 2.5 update for ansible
- Ansible Engine 2 update for ansible
- Ansible Engine 2.6 update for ansible
- Fedora 27 update for ansible
- Fedora EPEL 7 update for ansible
- Fedora 28 update for ansible
- Multiple vulnerabilities in Red Hat OpenStack packages