High severity · published May 17, 2018
CVE-2018-1111
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP…
7.5
CVSS
97.9%
EPSS
No
On KEV
Description
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
CVSS vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)97.9% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
6.0; 6.4; 6.5; 6.6; 6.7; 7.0; +4 more · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0; 7.0 · source: NVD
EV
Enterprise Virtualization · Redhat
4.0; 4.2 · source: NVD
EV
Enterprise Virtualization Host · Redhat
4.0 · source: NVD
FE
Fedora · Fedoraproject
26; 27; 28 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1111
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1111
Third Party Advisory
http://www.securityfocus.com/bid/104195
Third Party Advisory
http://www.securitytracker.com/id/1040912
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1453
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1454
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1455
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1456
More from Fedora
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2021-44026
Roundcube Webmail SQL Injection Vulnerability
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)