CVE-2018-10843: Input Validation
OpenShift Container Platform and OpenShift Online have a flaw in the source-to-image functionality. An attacker that can create images with the 'io.openshift.s2i.assemble-user' LABEL set to 'root' can execute arbitrary code with full privileges in the builder pod during S2I build.
Other sources
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10843?
CVE-2018-10843 has been rated as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2018-10843?
To resolve CVE-2018-10843, upgrade the atomic-openshift package to version 3.7.53 or 3.9.31 or later.
Which versions are affected by CVE-2018-10843?
CVE-2018-10843 affects Red Hat OpenShift Container Platform versions before 3.7.53 and 3.9.31.
What type of vulnerability is CVE-2018-10843?
CVE-2018-10843 is identified as a privilege escalation vulnerability within the OpenShift Container Platform.
Can CVE-2018-10843 be exploited remotely?
Yes, an attacker can exploit CVE-2018-10843 to gain unauthorized root access in a non-privileged container.