Lucene search

[email protected]CVE-2018-1111

HistoryMay 17, 2018 - 4:29 p.m.

CVE-2018-1111

2018-05-1716:29:00

CWE-78

CWE-77

[email protected]

web.nvd.nist.gov

299

cve-2018-1111

dhcp packages

red hat enterprise linux

fedora 28

command injection

networkmanager

dhcp client

vulnerability

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.973 High

EPSS

Percentile

99.9%

JSON

DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

Affected configurations

Vulners

NVD

Node

redhatredhat_package_manager

fedoranewsx

VendorProductVersionCPE
redhatredhat_package_manager*cpe:2.3:a:redhat:redhat_package_manager:*:*:*:*:*:*:*:*
redhatredhat_package_manager*cpe:2.3:a:redhat:redhat_package_manager:*:*:*:*:*:*:*:*
fedoranewsx*cpe:2.3:a:fedora:newsx:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	redhat_package_manager	*	cpe:2.3:a:redhat:redhat_package_manager::::::::
redhat	redhat_package_manager	*	cpe:2.3:a:redhat:redhat_package_manager::::::::
fedora	newsx	*	cpe:2.3:a:fedora:newsx::::::::

CNA Affected

[
  {
    "product": "dhcp",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "Red Hat Enterprise Linux 6"
      },
      {
        "status": "affected",
        "version": "Red Hat Enterprise Linux 7"
      }
    ]
  },
  {
    "product": "dhcp",
    "vendor": "Fedora",
    "versions": [
      {
        "status": "affected",
        "version": "Fedora 28"
      }
    ]
  }
]