CVE-2018-1111 DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious D...
HighCVSS 7.5
EPSS 97.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 26 | No fix listed |
| fedoraproject fedora | = 27 | No fix listed |
| fedoraproject fedora | = 28 | No fix listed |
| redhat enterprise virtualization | = 4.0 | No fix listed |
| redhat enterprise virtualization | = 4.2 | No fix listed |
| redhat enterprise virtualization host | = 4.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 6.4 | No fix listed |
| redhat enterprise linux | = 6.5 | No fix listed |
| redhat enterprise linux | = 6.6 | No fix listed |
| redhat enterprise linux | = 6.7 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux | = 7.2 | No fix listed |
| redhat enterprise linux | = 7.3 | No fix listed |
| redhat enterprise linux | = 7.4 | No fix listed |
| redhat enterprise linux | = 7.5 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| redhat/dhcp | = Red Hat Enterprise Linux 6 | No fix listed |
| redhat/dhcp | = Red Hat Enterprise Linux 7 | No fix listed |
| fedora dhcp | = Fedora 28 | No fix listed |
References
- 104195 third-party-advisory vdb-entry
- 1040912 third-party-advisory vdb-entry
- RHSA-2018:1453 vendor-advisory
- RHSA-2018:1454 vendor-advisory
- RHSA-2018:1455 vendor-advisory
- RHSA-2018:1456 vendor-advisory
- RHSA-2018:1457 vendor-advisory
- RHSA-2018:1458 vendor-advisory
- RHSA-2018:1459 vendor-advisory
- RHSA-2018:1460 vendor-advisory
- RHSA-2018:1461 vendor-advisory
- RHSA-2018:1524 vendor-advisory
- access.redhat.com vendor-advisory
- bugzilla.redhat.com issue-tracking vendor-advisory
- help.ecostruxureit.com
- FEDORA-2018-36058ed9f2 vendor-advisory
- FEDORA-2018-5392896132 vendor-advisory
- FEDORA-2018-23ca7a6798 vendor-advisory
- 44652 exploit third-party-advisory vdb-entry
- 44890 exploit third-party-advisory vdb-entry
- www.tenable.com