CVE-2018-1111
High · 7.5CVSS
7.5
EPSS
97.9%
Published
May 17, 2018
CISA due date
—
The record
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:6::client | dhclient | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::client | dhcp | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::client | dhcp-common | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::client | dhcp-debuginfo | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::client | dhcp-devel | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::computenode | dhclient | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp-common | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp-debuginfo | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::computenode | dhcp-devel | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::server | dhclient | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::server | dhcp | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::server | dhcp-common | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::server | dhcp-debuginfo | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::server | dhcp-devel | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::workstation | dhclient | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp-common | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp-debuginfo | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:6::workstation | dhcp-devel | 0 | 12:4.1.1-53.P1.el6_9.4 |
| Red Hat:enterprise_linux:7::client | dhclient | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::client | dhcp | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::client | dhcp-common | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::client | dhcp-debuginfo | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::client | dhcp-devel | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::client | dhcp-libs | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhclient | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhcp | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhcp-common | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhcp-debuginfo | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhcp-devel | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::computenode | dhcp-libs | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::hypervisor | imgbased | 0 | 0:1.0.16-0.1.el7ev |
| Red Hat:enterprise_linux:7::hypervisor | ovirt-node-ng | 0 | 0:4.2.0-0.20170814.0.el7 |
| Red Hat:enterprise_linux:7::hypervisor | ovirt-node-ng-nodectl | 0 | 0:4.2.0-0.20170814.0.el7 |
| Red Hat:enterprise_linux:7::hypervisor | python-imgbased | 0 | 0:1.0.16-0.1.el7ev |
| Red Hat:enterprise_linux:7::hypervisor | redhat-release-virtualization-host | 0 | 0:4.2-3.0.el7 |
| Red Hat:enterprise_linux:7::hypervisor | redhat-virtualization-host | 0 | 0:4.2-20180508.0.el7_5 |
| Red Hat:enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update | 0 | 0:4.2-20180508.0.el7_5 |
| Red Hat:enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update-placeholder | 0 | 0:4.2-3.0.el7 |
| Red Hat:enterprise_linux:7::hypervisor | rhvm-appliance | 0 | 2:4.2-20180504.0.el7 |
| Red Hat:enterprise_linux:7::server | dhclient | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::server | dhcp | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::server | dhcp-common | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::server | dhcp-debuginfo | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::server | dhcp-devel | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::server | dhcp-libs | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhclient | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhcp | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhcp-common | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhcp-debuginfo | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhcp-devel | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:enterprise_linux:7::workstation | dhcp-libs | 0 | 12:4.2.5-68.el7_5.1 |
| Red Hat:rhel_aus:6.4::server | dhclient | 0 | 12:4.1.1-34.P1.el6_4.2 |
| Red Hat:rhel_aus:6.4::server | dhcp | 0 | 12:4.1.1-34.P1.el6_4.2 |
| Red Hat:rhel_aus:6.4::server | dhcp-common | 0 | 12:4.1.1-34.P1.el6_4.2 |
| Red Hat:rhel_aus:6.4::server | dhcp-debuginfo | 0 | 12:4.1.1-34.P1.el6_4.2 |
| Red Hat:rhel_aus:6.4::server | dhcp-devel | 0 | 12:4.1.1-34.P1.el6_4.2 |
| Red Hat:rhel_aus:6.5::server | dhclient | 0 | 12:4.1.1-38.P1.el6_5.1 |
| Red Hat:rhel_aus:6.5::server | dhcp | 0 | 12:4.1.1-38.P1.el6_5.1 |
| Red Hat:rhel_aus:6.5::server | dhcp-common | 0 | 12:4.1.1-38.P1.el6_5.1 |
| Red Hat:rhel_aus:6.5::server | dhcp-debuginfo | 0 | 12:4.1.1-38.P1.el6_5.1 |
| Red Hat:rhel_aus:6.5::server | dhcp-devel | 0 | 12:4.1.1-38.P1.el6_5.1 |
| Red Hat:rhel_aus:6.6::server | dhclient | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_aus:6.6::server | dhcp | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_aus:6.6::server | dhcp-common | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_aus:6.6::server | dhcp-debuginfo | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_aus:6.6::server | dhcp-devel | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_aus:7.2::server | dhclient | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_aus:7.2::server | dhcp | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_aus:7.2::server | dhcp-common | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_aus:7.2::server | dhcp-debuginfo | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_aus:7.2::server | dhcp-devel | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_aus:7.2::server | dhcp-libs | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhclient | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhcp | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhcp-common | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhcp-debuginfo | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhcp-devel | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_e4s:7.2::server | dhcp-libs | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_eus:6.7::computenode | dhclient | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::computenode | dhcp | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::computenode | dhcp-common | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::computenode | dhcp-debuginfo | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::computenode | dhcp-devel | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::server | dhclient | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::server | dhcp | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::server | dhcp-common | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::server | dhcp-debuginfo | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:6.7::server | dhcp-devel | 0 | 12:4.1.1-49.P1.el6_7.1 |
| Red Hat:rhel_eus:7.3::computenode | dhclient | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::computenode | dhcp | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::computenode | dhcp-common | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::computenode | dhcp-debuginfo | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::computenode | dhcp-devel | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::computenode | dhcp-libs | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhclient | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhcp | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhcp-common | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhcp-debuginfo | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhcp-devel | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.3::server | dhcp-libs | 0 | 12:4.2.5-47.el7_3.1 |
| Red Hat:rhel_eus:7.4::computenode | dhclient | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::computenode | dhcp | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::computenode | dhcp-common | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::computenode | dhcp-debuginfo | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::computenode | dhcp-devel | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::computenode | dhcp-libs | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhclient | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhcp | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhcp-common | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhcp-debuginfo | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhcp-devel | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_eus:7.4::server | dhcp-libs | 0 | 12:4.2.5-58.el7_4.4 |
| Red Hat:rhel_tus:6.6::server | dhclient | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_tus:6.6::server | dhcp | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_tus:6.6::server | dhcp-common | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_tus:6.6::server | dhcp-debuginfo | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_tus:6.6::server | dhcp-devel | 0 | 12:4.1.1-43.P1.el6_6.2 |
| Red Hat:rhel_tus:7.2::server | dhclient | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_tus:7.2::server | dhcp | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_tus:7.2::server | dhcp-common | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_tus:7.2::server | dhcp-debuginfo | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_tus:7.2::server | dhcp-devel | 0 | 12:4.2.5-42.el7_2.1 |
| Red Hat:rhel_tus:7.2::server | dhcp-libs | 0 | 12:4.2.5-42.el7_2.1 |
Related vulnerabilities
- CVE-2012-3955 ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to… Also affects dhclient
- CVE-2012-3571 ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to… Also affects dhclient
- CVE-2011-4539 dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly… Also affects dhclient
- CVE-2011-0997 dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and… Also affects dhclient
- CVE-2011-0413 The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before… Also affects dhclient
- CVE-2011-2749 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects dhclient
- CVE-2011-2748 The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV… Also affects dhclient
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects dhclient