PT-2018-17860 · Myrepos+1 · Myrepos+1

Jakub Wilk · Published 2018-02-14 · Updated 2024-06-15 · CVE-2018-7032

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions myrepos versions through 1.20171231

Description The issue allows a malicious website operator or a Man-in-the-Middle (MitM) attacker to execute arbitrary code. This can be achieved by taking advantage of the fact that webcheckout in myrepos does not sanitize URLs passed to git clone. Demonstrated attacks include an "ext::sh -c" attack or an option injection attack.

Recommendations For versions through 1.20171231, update to a version that sanitizes URLs passed to git clone to prevent arbitrary code execution.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2018-2065

CVE-2018-7032

OPENSUSE-SU-2024:11063-1

Affected Products

Alt Linux

Myrepos

References · 12

• 🔥 https://bugs.debian.org/840014 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:11063-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-7032 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2018-7032 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-7032 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7032 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7032 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7032 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-7032 · Vendor Advisory
• https://security.alpinelinux.org/vuln/CVE-2018-7032 · Note
• https://suse.com/security/cve/CVE-2018-7032 · Note