Command injection in Virtual Desktop Server Manager - CVE-2019-3831
Published: February 19, 2019
Vulnerability identifier: #VU17772
CSH Severity: Low
CVSS v4: 5 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H]
CVE-ID: CVE-2019-3831
CWE-ID: CWE-77
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local high-privileged attacker to execute arbitrary code on the target system.
The vulnerability exists due to exposure of exposed a systemd_run() function to the vdsm system use. A local attacker can inject arbitrary commands and execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Virtual Desktop Server Manager
safelease (Red Hat package)
ioprocess (Red Hat package)
vdsm (Red Hat package)
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization Host
safelease (Red Hat package)
ioprocess (Red Hat package)
vdsm (Red Hat package)
Red Hat Virtualization
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization Host
How to mitigate CVE-2019-3831
Update to version 4.30.9.
Virtual Desktop Server Manager - update to 4.30.9
safelease (Red Hat package) - update to 1.0-7.el7ev
ioprocess (Red Hat package) - update to 1.1.2-1.el7ev
vdsm (Red Hat package) - update to 4.30.18-1.0.el7rhgs
safelease (Red Hat package) - update to 1.0-7.el7ev
ioprocess (Red Hat package) - update to 1.1.2-1.el7ev
vdsm (Red Hat package) - update to 4.30.18-1.0.el7rhgs