A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade yum-plugin-protectbaseUpgrade yum-plugin-rpm-warm-cacheUpgrade yum-plugin-changelogUpgrade yum-plugin-fs-snapshotUpgrade yum-plugin-post-transaction-actionsUpgrade yum-plugin-versionlockUpgrade yum-plugin-remove-with-leavesUpgrade yum-plugin-pre-transaction-actionsUpgrade yum-plugin-list-dataUpgrade yum-plugin-merge-confUpgrade yum-NetworkManager-dispatcherUpgrade yum-plugin-psUpgrade yum-plugin-tmprepoUpgrade yum-plugin-localUpgrade yum-plugin-show-leavesUpgrade yum-plugin-coprUpgrade yum-utilsUpgrade yum-plugin-prioritiesUpgrade yum-plugin-aliasesUpgrade yum-plugin-ovlUpgrade yum-plugin-auto-update-debug-infoUpgrade yum-plugin-tsflagsUpgrade yum-updateonbootUpgrade yum-plugin-verifyUpgrade yum-plugin-upgrade-helperUpgrade yum-plugin-filter-dataUpgrade yum-plugin-keysUpgrade yum-plugin-fastestmirror | Apr 27, 2020 | Aug 1, 2018 |
| Amazon_linux | — | Upgrade yum-utils | Aug 11, 2018 | Jul 30, 2018 |
| Centos_linux | — | Upgrade yum-plugin-filter-dataUpgrade yum-plugin-psUpgrade yum-plugin-protectbaseUpgrade yum-NetworkManager-dispatcherUpgrade yum-plugin-securityUpgrade yum-plugin-versionlockUpgrade yum-utilsUpgrade yum-updateonbootUpgrade yum-plugin-fastestmirrorUpgrade yum-plugin-show-leavesUpgrade yum-plugin-keysUpgrade yum-plugin-auto-update-debug-infoUpgrade yum-plugin-remove-with-leavesUpgrade yum-plugin-tsflagsUpgrade yum-plugin-list-dataUpgrade yum-plugin-ovlUpgrade yum-plugin-prioritiesUpgrade yum-plugin-merge-confUpgrade yum-plugin-aliasesUpgrade yum-plugin-pre-transaction-actionsUpgrade yum-plugin-fs-snapshotUpgrade yum-plugin-tmprepoUpgrade yum-plugin-coprUpgrade yum-plugin-post-transaction-actionsUpgrade yum-plugin-upgrade-helperUpgrade yum-plugin-changelogUpgrade yum-plugin-localUpgrade yum-plugin-rpm-warm-cacheUpgrade yum-plugin-verify | Aug 11, 2018 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade yum-plugin-prioritiesUpgrade yum-plugin-aliasesUpgrade yum-utilsUpgrade yum-plugin-tmprepoUpgrade yum-plugin-verifyUpgrade yum-plugin-versionlockUpgrade yum-plugin-changelog | Sep 27, 2018 | Aug 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade yum-plugin-prioritiesUpgrade yum-plugin-aliasesUpgrade yum-utilsUpgrade yum-plugin-verifyUpgrade yum-plugin-versionlockUpgrade yum-plugin-tmprepoUpgrade yum-plugin-changelog | Sep 27, 2018 | Aug 1, 2018 |
| Oracle_linux | — | Upgrade yum-plugin-fs-snapshotUpgrade yum-plugin-prioritiesUpgrade yum-plugin-aliasesUpgrade yum-plugin-upgrade-helperUpgrade yum-plugin-post-transaction-actionsUpgrade yum-plugin-coprUpgrade yum-plugin-tmprepoUpgrade yum-plugin-rpm-warm-cacheUpgrade yum-plugin-verifyUpgrade yum-plugin-merge-confUpgrade yum-plugin-pre-transaction-actionsUpgrade yum-plugin-localUpgrade yum-updateonbootUpgrade yum-plugin-remove-with-leavesUpgrade yum-utilsUpgrade yum-plugin-show-leavesUpgrade yum-plugin-filter-dataUpgrade yum-plugin-changelogUpgrade yum-plugin-psUpgrade yum-plugin-versionlockUpgrade yum-plugin-protectbaseUpgrade yum-plugin-list-dataUpgrade yum-NetworkManager-dispatcherUpgrade yum-plugin-securityUpgrade yum-plugin-ovlUpgrade yum-plugin-keysUpgrade yum-plugin-tsflagsUpgrade yum-plugin-fastestmirrorUpgrade yum-plugin-auto-update-debug-info | Jul 31, 2018 | Jul 11, 2018 |
| Redhat_linux | — | Upgrade yum-plugin-rpm-warm-cacheUpgrade yum-plugin-verifyUpgrade yum-plugin-tmprepoUpgrade yum-plugin-fs-snapshotUpgrade yum-plugin-changelogUpgrade yum-plugin-pre-transaction-actionsUpgrade yum-plugin-filter-dataUpgrade yum-plugin-prioritiesNo solution existsUpgrade yum-plugin-post-transaction-actionsUpgrade yum-plugin-aliasesUpgrade yum-plugin-upgrade-helperUpgrade yum-plugin-localUpgrade yum-plugin-remove-with-leavesUpgrade yum-plugin-show-leavesUpgrade yum-plugin-versionlockUpgrade yum-plugin-fastestmirrorUpgrade yum-plugin-keysUpgrade yum-plugin-securityUpgrade yum-plugin-psUpgrade yum-NetworkManager-dispatcherUpgrade yum-plugin-protectbaseUpgrade yum-plugin-coprUpgrade yum-plugin-tsflagsUpgrade yum-utilsUpgrade yum-plugin-ovlUpgrade yum-updateonbootUpgrade yum-plugin-merge-confUpgrade yum-plugin-list-dataUpgrade yum-plugin-auto-update-debug-info | Jul 31, 2018 | Jul 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub