CVE-2018-1111: Command Injection
First published: Mon Apr 16 2018(Updated: )
A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fedoraproject Fedora | =26 | |
| Fedoraproject Fedora | =27 | |
| Fedoraproject Fedora | =28 | |
| Redhat Enterprise Virtualization | =4.0 | |
| Redhat Enterprise Virtualization | =4.2 | |
| Redhat Enterprise Virtualization Host | =4.0 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =6.4 | |
| Redhat Enterprise Linux | =6.5 | |
| Redhat Enterprise Linux | =6.6 | |
| Redhat Enterprise Linux | =6.7 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =7.2 | |
| Redhat Enterprise Linux | =7.3 | |
| Redhat Enterprise Linux | =7.4 | |
| Redhat Enterprise Linux | =7.5 | |
| Redhat Enterprise Linux Desktop | =6.0 | |
| Redhat Enterprise Linux Desktop | =7.0 | |
| Redhat Enterprise Linux Server | =6.0 | |
| Redhat Enterprise Linux Server | =7.0 | |
| Redhat Enterprise Linux Workstation | =6.0 | |
| Redhat Enterprise Linux Workstation | =7.0 | |
| redhat/dhcp | <12:4.1.1-53.P1.el6_9.4 | 12:4.1.1-53.P1.el6_9.4 |
| redhat/dhcp | <12:4.1.1-34.P1.el6_4.2 | 12:4.1.1-34.P1.el6_4.2 |
| redhat/dhcp | <12:4.1.1-38.P1.el6_5.1 | 12:4.1.1-38.P1.el6_5.1 |
| redhat/dhcp | <12:4.1.1-43.P1.el6_6.2 | 12:4.1.1-43.P1.el6_6.2 |
| redhat/dhcp | <12:4.1.1-49.P1.el6_7.1 | 12:4.1.1-49.P1.el6_7.1 |
| redhat/dhcp | <12:4.2.5-68.el7_5.1 | 12:4.2.5-68.el7_5.1 |
| redhat/dhcp | <12:4.2.5-42.el7_2.1 | 12:4.2.5-42.el7_2.1 |
| redhat/dhcp | <12:4.2.5-47.el7_3.1 | 12:4.2.5-47.el7_3.1 |
| redhat/dhcp | <12:4.2.5-58.el7_4.4 | 12:4.2.5-58.el7_4.4 |
| redhat/imgbased | <0:1.0.16-0.1.el7e | 0:1.0.16-0.1.el7e |
| redhat/ovirt-node-ng | <0:4.2.0-0.20170814.0.el7 | 0:4.2.0-0.20170814.0.el7 |
| redhat/redhat-release-virtualization-host | <0:4.2-3.0.el7 | 0:4.2-3.0.el7 |
Remedy
Please access https://access.redhat.com/security/vulnerabilities/3442151 for information on how to mitigate this issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2018-1111 https://nvd.nist.gov/vuln/detail/CVE-2018-1111 https://access.redhat.com/security/vulnerabilities/3442151
- https://bugzilla.redhat.com/show_bug.cgi?id=1567974
- https://access.redhat.com/errata/RHSA-2018:1454
- https://access.redhat.com/errata/RHSA-2018:1461
- https://access.redhat.com/errata/RHSA-2018:1460
- https://access.redhat.com/errata/RHSA-2018:1459
- https://access.redhat.com/errata/RHSA-2018:1458
- https://access.redhat.com/errata/RHSA-2018:1453
- https://access.redhat.com/errata/RHSA-2018:1457
- https://access.redhat.com/errata/RHSA-2018:1456
- https://access.redhat.com/errata/RHSA-2018:1455
- https://access.redhat.com/errata/RHSA-2018:1524
- https://access.redhat.com/errata/RHSA-2018:1525
- https://access.redhat.com/security/cve/CVE-2018-1111
- http://www.securityfocus.com/bid/104195
- http://www.securitytracker.com/id/1040912
- https://access.redhat.com/security/vulnerabilities/3442151
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDCLLCHYFFXW354HMB5QBXOQOY5BH2EJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDJA4QRR74TMXW34Q3DYYFPVBYRTJBI7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMTTB54QNTPD2SK6UL32EVQHMZP6BUUD/
- https://www.exploit-db.com/exploits/44652/
- https://www.exploit-db.com/exploits/44890/
- https://www.tenable.com/security/tns-2018-10
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1567974#c0
- https://src.fedoraproject.org/cgit/rpms/dhcp.git/commit/?id=a0d47e7ac135c54863cb164adb811443f676aa17
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1578362
- https://lists.isc.org/pipermail/dhcp-users/2018-May/021250.html
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is CVE-2018-1111?
CVE-2018-1111 is a command injection vulnerability found in the NetworkManager integration script included in the DHCP client.
Who is affected by CVE-2018-1111?
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier versions are affected by CVE-2018-1111.
How severe is CVE-2018-1111?
CVE-2018-1111 has a severity rating of 7.5, indicating it is critical.
How can I fix CVE-2018-1111?
To fix CVE-2018-1111, update the DHCP package to version 12:4.1.1-53.P1.el6_9.4 or higher for Red Hat Enterprise Linux 6, and version 12:4.2.5-68.el7_5.1 or higher for Red Hat Enterprise Linux 7. Additionally, update Fedora to the latest version.
Where can I find more information about CVE-2018-1111?
You can find more information about CVE-2018-1111 at the following references: [Reference 1](https://access.redhat.com/security/vulnerabilities/3442151), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1567974#c0), [Reference 3](https://src.fedoraproject.org/cgit/rpms/dhcp.git/commit/?id=a0d47e7ac135c54863cb164adb811443f676aa17).
- collector/redhat-cve
- collector/nvd-index
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-1111
- agent/softwarecombine
- agent/weakness
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/tags
- agent/event
- agent/description
- agent/trending
- package-manager/redhat
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/26
- version/fedoraproject fedora/27
- version/fedoraproject fedora/28
- vendor/redhat
- canonical/redhat enterprise virtualization
- version/redhat enterprise virtualization/4.0
- version/redhat enterprise virtualization/4.2
- canonical/redhat enterprise virtualization host
- version/redhat enterprise virtualization host/4.0
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/6.4
- version/redhat enterprise linux/6.5
- version/redhat enterprise linux/6.6
- version/redhat enterprise linux/6.7
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/7.2
- version/redhat enterprise linux/7.3
- version/redhat enterprise linux/7.4
- version/redhat enterprise linux/7.5
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/6.0
- version/redhat enterprise linux desktop/7.0
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/6.0
- version/redhat enterprise linux server/7.0
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/6.0
- version/redhat enterprise linux workstation/7.0