PT-2018-10015 · Selinux+3 · Policycoreutils+3

Richard Maciel Costa · Publicado 2018-03-02 · Atualizado 2024-06-15 · CVE-2018-1063

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions policycoreutils version 2.5-11

Description The issue allows a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions through a symbolic link attack on filesystems during the context relabeling process. This typically occurs when transitioning the SELinux state from disabled to enabled, either in permissive or enforcing mode.

Recommendations For policycoreutils version 2.5-11, consider restricting the use of the context relabeling feature until a patch is available, and ensure that SELinux state transitions are carefully managed to minimize the risk of exploitation.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CESA-2018_0913

CVE-2018-1063

MGASA-2021-0032

OPENSUSE-SU-2024:11179-1

RHSA-2018:0913

RHSA-2018_0913

SUSE-SU-2018:0926-1

SUSE-SU-2018:0927-1

SUSE-SU-2018_0926-1

SUSE-SU-2018_0927-1

Produtos afetados

Centos

Red Hat

Suse

Policycoreutils

Referências · 20

• https://suse.com/support/update/announcement/2018/suse-su-20180926-1 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11179-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-7545 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1550122 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0913 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1063 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1063 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-1063 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2018/suse-su-20180927-1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1063 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1063 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1063 · Nota
• https://advisories.mageia.org/MGASA-2021-0032.html · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1063 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1063 · Aviso do Fabricante