Red Hat Linux DHCP Client Found Vulnerable to Command Injection Attacks
A Google security researcher has chanced on a severe a ways flung reveal injection vulnerability in the DHCP client implementation of Pink Hat Linux and its derivatives cherish Fedora working procedure.
The vulnerability, tracked as CVE-2018-1111, could perhaps well well permit attackers to gather arbitrary commands with root privileges on centered systems.
On every occasion your procedure joins a network, it’s the DHCP client application which permits your procedure to automatically receive network configuration parameters, equivalent to an IP address and DNS servers, from the DHCP (Dynamic Host Judge watch over Protocol) server.
The vulnerability resides in the NetworkManager integration script integrated in the DHCP client packages which is configured to accomplish network configuration the exhaust of the DHCP protocol.
Felix Wilhelm from the Google security crew chanced on that attackers with a malicious DHCP server, or connected to the identical network because the victim, can exploit this flaw by spoofing DHCP responses, at closing allowing them to bustle arbitrary commands with root privileges on the victim’s procedure operating inclined DHCP client.
Though corpulent limited print of the vulnerability enjoy no longer been launched, Wilhelm claims his PoC exploit code is so immediate in size that it even can slot in a tweet.
In the intervening time, Barkın Kılıç, a security researcher from Turkey, has launched a tweetable proof-of-thought exploit code for the Pink Hat Linux DHCP client vulnerability on Twitter.
In its security advisory, Pink Hat has confirmed that the vulnerability impacts Pink Hat Enterprise Linux 6 and seven, and that every of its clients operating affection variations of the dhclient kit ought to substitute their packages to the more contemporary variations as quickly as they’re accessible.
“Customers enjoy the selection to grab away or disable the inclined script, however this can prevent definite configuration parameters provided by the DHCP server from being configured on a local procedure, equivalent to addresses of the local NTP or NIS servers,” Pink Hat warns.
Fedora has also launched new variations of DHCP packages containing fixes for Fedora 26, 27, and 28.
Other licensed Linux distributions cherish OpenSUSE and Ubuntu gather no longer appear to be impacted by the vulnerability, as their DHCP client implementation doesn’t enjoy NetworkManager integration script by default.
