PT-2017-6156 · Red Hat · Ovirt Node+1

Published 2017-09-25 · Updated 2023-02-13 · CVE-2014-8170

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ovirt-node version 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3

Description The issue arises from the ovirt safe delete config function in ovirtfunctions.py and other unspecified locations, which fails to properly quote input strings. This allows remote authenticated users and physically proximate attackers to execute arbitrary commands by including a semicolon (;) in an input string.

Recommendations For ovirt-node version 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3, consider disabling the ovirt safe delete config function until a patch is available to prevent the execution of arbitrary commands. Restrict access to the ovirtfunctions.py module to minimize the risk of exploitation. Avoid using input strings that contain semicolons (;) in the affected API endpoints until the issue is resolved.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2014-8170

Affected Products

Red Hat Enterprise Virtualization

Ovirt Node

References · 4

• 🔥 https://gerrit.ovirt.org/gitweb?p=ovirt-node.git;a=blob;f=src/ovirtnode/ovirtfunctions.py;h=caef7ef019ca12b49aa3c030792538956fb4caad;hb=e11e02cd9256c854dd0419515097637d6829b4f1#l1091 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8170 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1194745 · Note
• https://gerrit.ovirt.org/gitweb?p=ovirt-node.git%3Ba=blob%3Bf=src/ovirtnode/ovirtfunctions.py%3Bh=caef7ef019ca12b49aa3c030792538956fb4caad%3Bhb=e11e02cd9256c854dd0419515097637d6829b4f1#l1091 · Note