CVE-2018-10897: redhat enterprise_linux_desktop Link Following

CVSS: 9.3v2.0HighModified

AliasesRHSA-2018:2284RHSA-2018:2285RHSA-2018:2626

Published 01-08-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-10897 is a high (CVSS 9.3) Link Following vulnerability in redhat enterprise_linux_desktop. EPSS estimates a 5.64% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

5.64%

0%100%

Low · -0.07 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

01-08-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.

CVSS metrics

5 scores · 3 sources · 3 versions

v3.18.1v3.08.8v2.09.3

EPSS trend

Probability

5.64%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

-0.07 pp

From 5.71% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.64%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat39 products

enterprise_linux_desktop6.0 | 7.0
enterprise_linux_server6.0 | 7.0
enterprise_linux_workstation6.0 | 7.0
virtualization4.0
imgbased< 0:1.0.24-1.el7ev

python-imgbased< 0:1.0.24-1.el7ev
redhat-release-virtualization-host< 0:4.2-6.0.el7
redhat-virtualization-host< 0:4.2-20180828.2.el7_5
redhat-virtualization-host-image-update< 0:4.2-20180828.2.el7_5
redhat-virtualization-host-image-update-placeholder< 0:4.2-6.0.el7
yum-NetworkManager-dispatcher< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-aliases< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-auto-update-debug-info< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-changelog< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-copr< 0:1.1.31-46.el7_5
yum-plugin-fastestmirror< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-filter-data< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-fs-snapshot< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-keys< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-list-data< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-local< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-merge-conf< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-ovl< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-post-transaction-actions< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-pre-transaction-actions< 0:1.1.31-46.el7_5
yum-plugin-priorities< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-protectbase< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-ps< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-remove-with-leaves< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-rpm-warm-cache< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-security< 0:1.1.30-42.el6_10
yum-plugin-show-leaves< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-tmprepo< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-tsflags< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-upgrade-helper< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-verify< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-plugin-versionlock< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-updateonboot< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5
yum-utils< 0:1.1.30-42.el6_10 | < 0:1.1.31-46.el7_5

Show all 39

Rpm1 product

yum-utils≤ 1.1.31

The rpm project1 product

yum-utils:1.1.31

3 vendors · 41 products

References

20 links

www.securitytracker.com/id/1041594VDB EntryX Refsource SECTRACKThird Party Advisory
access.redhat.com/errata/RHSA-2018:2285Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:2284Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
github.com/rpm-software-management/yum-utils/commit/6a8de061f8fdc885e74ebe8c94625bf53643b71cX Refsource CONFIRMPatchThird Party Advisory
access.redhat.com/errata/RHSA-2018:2626Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
github.com/rpm-software-management/yum-utils/commit/7554c0133eb830a71dc01846037cc047d0acbc2cX Refsource CONFIRMPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10897X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
help.ecostruxureit.com/display/…X Refsource CONFIRMThird Party Advisory
github.com/rpm-software-management/yum-utils/pull/43X Refsource CONFIRMThird Party Advisory
access.redhat.com/security/updates/classification/ARTICLE

Show all 20 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities