Red Hat update for jackson-databind
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 7 |
| CVE-ID | CVE-2017-12196 CVE-2018-1073 CVE-2018-5968 CVE-2018-7750 CVE-2018-8088 CVE-2017-7525 CVE-2017-17485 |
| CWE-ID | CWE-300 CWE-209 CWE-502 CWE-592 CWE-284 |
| Exploitation vector | Network |
| Public exploit |
Public exploit code for vulnerability #4 is available. Public exploit code for vulnerability #6 is available. Public exploit code for vulnerability #7 is available. |
| Vulnerable software |
Red Hat Virtualization Host Web applications / Remote management & hosting panels Red Hat Virtualization Server applications / Virtualization software |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 7 vulnerabilities.
1) Man-in-the-middle attack
EUVDB-ID: #VU12802
Risk: Low
CVSSv4.0: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2017-12196
CWE-ID:
CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line when using Digest authentication. A remote attacker can conduct man-in-the-middle attack and gin access to potentially sensitive information.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Information disclosure through an error message
EUVDB-ID: #VU12803
Risk: Low
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2018-1073
CWE-ID:
CWE-209 - Information Exposure Through an Error Message
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists in the ovirt-engine web console login form due to returning different errors for non-existent users and invalid passwords. A remote attacker can discover the names of valid user accounts.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Deserialization of untrusted data
EUVDB-ID: #VU10610
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2018-5968
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code.
The weakness exists due to deserialization flaw. A remote attacker can supply specially crafted input, execute arbitrary code and bypass a blacklist on the target system.
Successful exploitation of the vulnerability may result in system compromise.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Authentication bypass
EUVDB-ID: #VU11130
Risk: Low
CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2018-7750
CWE-ID:
CWE-592 - Authentication Bypass Issues
Exploit availability: Yes
DescriptionThe vulnerability allows a remote unauthenticated attacker to bypass authentication.
The weakness exists is due to improper security restrictions. A remote attacker can use a customized SSH client, bypass authentication and gain unauthorized access to resources on the target systemю
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
5) Improper access control
EUVDB-ID: #VU11301
Risk: Low
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2018-8088
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a remote unauthenticated attacker to bypass access restrictions on the target system.
The weakness exists in the org.slf4j.ext.EventData class due to improper security restrictions. A remote attacker can send specially crafted input, bypass access restrictions and gain unauthorized access to perform further attacks.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Deserialization of untrusted data
EUVDB-ID: #VU9128
Risk: High
CVSSv4.0: 8.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]
CVE-ID: CVE-2017-7525
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to a deserialization flaw in the jackson-databind component. A remote attacker can send a specially crafted input to the readValue method of the ObjectMapper and execute arbitrary code with privileges of the target service.
Successful exploitation of the vulnerability may result in system compromise.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
7) Deserialization of untrusted data
EUVDB-ID: #VU10257
Risk: High
CVSSv4.0: 8.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]
CVE-ID: CVE-2017-17485
CWE-ID:
CWE-502 - Deserialization of Untrusted Data
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists in the FasterXML jackson-databind library due to improper validation of user-input handled by the readValue method of the ObjectMapper object. A remote attacker can send malicious input to the vulnerable method of a web application that uses the Spring library in the application's classpath and execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability may result in system compromise.
Install update from vendor's website.
Vulnerable software versionsRed Hat Virtualization Host: 4
Red Hat Virtualization: 4
CPE2.3- cpe:2.3:a:red_hat:red_hat_virtualization_host:4:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_virtualization:4:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2018:1525
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
