PT-2020-9917 · Apache · Apache Cloudstack

Libi2181 · Published 2020-05-14 · Updated 2021-07-21 · CVE-2019-17562

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions prior to 4.13.1

Description A buffer overflow issue has been identified due to the lack of validation of the mac parameter in the baremetal virtual router component. This allows an attacker to insert arbitrary shell commands into the mac parameter, which are then processed by the v-router. For instance, an attacker could manipulate the API endpoint "http://{GW}:10086/baremetal/provisiondone/{mac}" by inserting malicious commands, such as "http://{GW}:10086/baremetal/provisiondone/#';whoami;#".

Recommendations For all versions prior to 4.13.1, upgrade to Apache CloudStack 4.13.1.0 or a later version to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable mac parameter in the baremetal virtual router component until the upgrade can be applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2019-17562

Affected Products

Apache Cloudstack

References · 4

• 🔥 https://lists.apache.org/thread.html/rcbaafc6ae1f32e8f1e5987c243a26faf83c5172348ee7c17a54ea7f9%40%3Cusers.cloudstack.apache.org%3E · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17562 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17562 · Vendor Advisory
• https://t.me/cibsecurity/12073 · Telegram Post