cnvd - cnvd-2018-26001

CNVD-2018-26001

Vulnerability from cnvd - Published: 2018-12-20

Title

Open Build Service输入验证漏洞

Description

Open Build Service（OBS）是一套通用的、以自动、一致和可重复的方式从源代码构建和分发软件包的系统。 Open Build Service 51a17c553b6ae2598820b7a90fd0c11502a49106之前版本中的obs-service-tar_scm存在输入验证漏洞。远程攻击者可利用该漏洞访问并提取信息，或在攻击者控制的位置创建文件。

Severity

中

Patch Name

Open Build Service输入验证漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/openSUSE/obs-service-tar_scm/pull/254

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-12474

Impacted products

Name
open build service open build service <51a17c553b6ae2598820b7a90fd0c11502a49106

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-12474",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12474"
    }
  },
  "description": "Open Build Service\uff08OBS\uff09\u662f\u4e00\u5957\u901a\u7528\u7684\u3001\u4ee5\u81ea\u52a8\u3001\u4e00\u81f4\u548c\u53ef\u91cd\u590d\u7684\u65b9\u5f0f\u4ece\u6e90\u4ee3\u7801\u6784\u5efa\u548c\u5206\u53d1\u8f6f\u4ef6\u5305\u7684\u7cfb\u7edf\u3002\n\nOpen Build Service 51a17c553b6ae2598820b7a90fd0c11502a49106\u4e4b\u524d\u7248\u672c\u4e2d\u7684obs-service-tar_scm\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u5e76\u63d0\u53d6\u4fe1\u606f\uff0c\u6216\u5728\u653b\u51fb\u8005\u63a7\u5236\u7684\u4f4d\u7f6e\u521b\u5efa\u6587\u4ef6\u3002",
  "discovererName": "Matthias Gerstner",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/openSUSE/obs-service-tar_scm/pull/254",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-26001",
  "openTime": "2018-12-20",
  "patchDescription": "Open Build Service\uff08OBS\uff09\u662f\u4e00\u5957\u901a\u7528\u7684\u3001\u4ee5\u81ea\u52a8\u3001\u4e00\u81f4\u548c\u53ef\u91cd\u590d\u7684\u65b9\u5f0f\u4ece\u6e90\u4ee3\u7801\u6784\u5efa\u548c\u5206\u53d1\u8f6f\u4ef6\u5305\u7684\u7cfb\u7edf\u3002\r\n\r\nOpen Build Service 51a17c553b6ae2598820b7a90fd0c11502a49106\u4e4b\u524d\u7248\u672c\u4e2d\u7684obs-service-tar_scm\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u5e76\u63d0\u53d6\u4fe1\u606f\uff0c\u6216\u5728\u653b\u51fb\u8005\u63a7\u5236\u7684\u4f4d\u7f6e\u521b\u5efa\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Open Build Service\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "open build service open build service \u003c51a17c553b6ae2598820b7a90fd0c11502a49106"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-12474",
  "serverity": "\u4e2d",
  "submitTime": "2018-10-30",
  "title": "Open Build Service\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e"
}

CVE-2018-12474 (GCVE-0-2018-12474)

Vulnerability from cvelistv5 – Published: 2018-10-09 13:00 – Updated: 2024-09-16 18:19

Summary

Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106.

Severity ?

5.4 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-20 - Improper Input Validation

Assigner

microfocus

References

URL

Tags

	https://github.com/openSUSE/obs-service-tar_scm/p…	x_refsource_CONFIRM
	https://bugzilla.suse.com/show_bug.cgi?id=1107507	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	openSUSE	Open Build Service	Affected: unspecified , < 51a17c553b6ae2598820b7a90fd0c11502a49106 (custom)

Credits

Matthias Gerstner of SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:38:06.273Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/openSUSE/obs-service-tar_scm/pull/254"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1107507"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Open Build Service",
          "vendor": "openSUSE",
          "versions": [
            {
              "lessThan": "51a17c553b6ae2598820b7a90fd0c11502a49106",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Matthias Gerstner of SUSE"
        }
      ],
      "datePublic": "2018-09-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:54",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/openSUSE/obs-service-tar_scm/pull/254"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1107507"
        }
      ],
      "source": {
        "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1107507",
        "defect": [
          "https://bugzilla.suse.com/show_bug.cgi?id=1107507"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "DATE_PUBLIC": "2018-09-26T00:00:00.000Z",
          "ID": "CVE-2018-12474",
          "STATE": "PUBLIC",
          "TITLE": "Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Open Build Service",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "51a17c553b6ae2598820b7a90fd0c11502a49106"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "openSUSE"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Matthias Gerstner of SUSE"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20: Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/openSUSE/obs-service-tar_scm/pull/254",
              "refsource": "CONFIRM",
              "url": "https://github.com/openSUSE/obs-service-tar_scm/pull/254"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1107507",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1107507"
            }
          ]
        },
        "source": {
          "advisory": "https://bugzilla.suse.com/show_bug.cgi?id=1107507",
          "defect": [
            "https://bugzilla.suse.com/show_bug.cgi?id=1107507"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2018-12474",
    "datePublished": "2018-10-09T13:00:00Z",
    "dateReserved": "2018-06-15T00:00:00",
    "dateUpdated": "2024-09-16T18:19:31.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-26001

CVE-2018-12474 (GCVE-0-2018-12474)

Tags

Sightings

Nomenclature