CVE-2018-1063 Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restri...
MediumCVSS 4.4
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/policycoreutils(Debian:12) | < 2.7-1 | 2.7-1 |
| debian/policycoreutils(Debian:13) | < 2.7-1 | 2.7-1 |
| debian/policycoreutils(Debian:14) | < 2.7-1 | 2.7-1 |
| redhat enterprise linux | = 7.0 | No fix listed |
| selinux project selinux | All versions | No fix listed |
| selinux project policycoreutils | = 2.5-11 and newer | No fix listed |
References
- Debian Security Tracker CVE-2018-1063 vendor-advisory
- RHSA-2018:0913 vendor-advisory
- bugzilla.redhat.com issue-tracking mitigation vendor-advisory