CVE-2018-10897: Path Traversal
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.
Other sources
Reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository a user is syncing with, the attacker may be able to copy files outside of the destination directory via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-10897.
What is the severity of CVE-2018-10897?
The severity of CVE-2018-10897 is critical.
What is the affected software for CVE-2018-10897?
The affected software for CVE-2018-10897 includes Rpm Yum-utils, Redhat Virtualization, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, and Redhat Enterprise Linux Workstation.
How does CVE-2018-10897 impact the system?
CVE-2018-10897 allows attackers who control a repository to copy files outside of the destination directory on the targeted system via path traversal.
Are there any references for CVE-2018-10897?
Yes, the references for CVE-2018-10897 are: [1] https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1600454 [2] https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1552328 [3] https://github.com/rpm-software-management/yum-utils/commit/7554c0133eb830a71dc01846037cc047d0acbc2c