CVE-2018-10892 : The default OCI linux spec in oci/defaults{

The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.

Published 2018-07-06 16:29:00

Updated 2023-02-12 23:31:44

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2018-10892

Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Openstack » Version: 12
cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.0
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Docker » Docker » Community Edition Edition
Versions from including (>=) 1.11 and up to, including, (<=) 18.03.1
cpe:2.3:a:docker:docker:*:*:*:*:community_edition:*:*:*
Matching versions
Docker » Docker » Enterprise Edition Edition
Versions from including (>=) 1.11 and up to, including, (<=) 18.03.1
cpe:2.3:a:docker:docker:*:*:*:*:enterprise_edition:*:*:*
Matching versions
Mobyproject » Moby
Versions from including (>=) 1.11 and up to, including, (<=) 17.03.2
cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-10892

Top countries where our scanners detected CVE-2018-10892

Top open port discovered on systems with this issue 53

IPs affected by CVE-2018-10892 636,358

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-10892!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-10892

EPSS FAQ

0.20%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-10892

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.3	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L	2.0	3.7	Red Hat, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: Low Integrity: Low Availability: Low
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2018-10892

CWE-250 Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Assigned by: secalert@redhat.com (Primary)

References for CVE-2018-10892

https://access.redhat.com/errata/RHBA-2018:2796

RHBA-2018:2796 - Bug Fix Advisory - Red Hat Customer Portal
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2482

RHSA-2018:2482 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2729

RHSA-2018:2729 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10892

1598581 – (CVE-2018-10892) CVE-2018-10892 docker: container breakout without selinux in enforcing mode
Issue Tracking;Third Party Advisory
https://github.com/moby/moby/pull/37404

Add /proc/acpi to masked paths by runcom · Pull Request #37404 · moby/moby · GitHub
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html

[security-announce] openSUSE-SU-2019:2021-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url