CVE-2018-18556: Input Validation
First published: Mon Dec 17 2018(Updated: )
A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo) permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions and leverage its improper input validation condition to spawn an attacker-controlled shell with root privileges.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vyos | =1.1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/159234/VyOS-restricted-shell-Escape-Privilege-Escalation.html
- https://blog.mirch.io/2018/11/05/cve-2018-18556-vyos-privilege-escalation-via-sudo-pppd-for-operator-users/
- https://blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releases
Frequently Asked Questions
What is the severity of CVE-2018-18556?
The severity of CVE-2018-18556 is considered high due to the potential for privilege escalation.
How do I fix CVE-2018-18556?
To fix CVE-2018-18556, upgrade to a patched version of VyOS that addresses the privilege escalation issue.
Who is affected by CVE-2018-18556?
Users of VyOS version 1.1.8 are affected by CVE-2018-18556.
What kind of vulnerability is CVE-2018-18556?
CVE-2018-18556 is a privilege escalation vulnerability.
Can operator users exploit CVE-2018-18556?
Yes, a malicious operator user can exploit CVE-2018-18556 to gain elevated permissions.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vyos
- canonical/vyos
- version/vyos/1.1.8