CVE-2018-1111
78Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 7.5epss 98%
da publicação à arma0 dias
Publicada no NVD17 de mai.
1ª PoC17 de mai.
metasploit15 de mai.
probabilidade de exploração
98%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
7 exploit(s) público(s)
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
PoCs públicas encontradas — 7✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44652exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44890githubgithub.com/knqyf263/CVE-2018-1111★ 13githubgithub.com/kkirsche/CVE-2018-1111★ 12githubgithub.com/baldassarreFe/FEP3370-advanced-ethical-hacking★ 0cve_referencewww.exploit-db.com/exploits/44652/não verificadocve_referencewww.exploit-db.com/exploits/44890/não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://access.redhat.com/errata/RHSA-2018:1453https://access.redhat.com/errata/RHSA-2018:1454https://access.redhat.com/errata/RHSA-2018:1455https://access.redhat.com/errata/RHSA-2018:1456https://access.redhat.com/errata/RHSA-2018:1457https://access.redhat.com/errata/RHSA-2018:1458https://access.redhat.com/errata/RHSA-2018:1459https://access.redhat.com/errata/RHSA-2018:1460https://access.redhat.com/errata/RHSA-2018:1461https://access.redhat.com/errata/RHSA-2018:1524https://access.redhat.com/security/vulnerabilities/3442151https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111