Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:3249
HistoryOct 30, 2018 - 4:34 a.m.

(RHSA-2018:3249) Low: setup security and bug fix update

2018-10-3004:34:27
access.redhat.com
136

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

23.1%

JSON

The setup package contains a set of important default system configuration and setup files. Examples include /etc/passwd, /etc/group, and /etc/profile. Other examples are the default lists of reserved user IDs, reserved ports, reserved protocols, allowed shells, allowed secure terminals.

Security Fix(es):

  • setup: nologin listed in /etc/shells violates security expectations (CVE-2018-1113)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchsetup< 2.8.71-10.el7setup-2.8.71-10.el7.noarch.rpm

Related

nessus 14
oraclelinux 1
openvas 3
ibm 3
cve 1
cvelist 1
amazon 1
prion 1
redhatcve 1
nvd 1
fedora 1
centos 1
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.1.0 : setup (EulerOS-SA-2019-1409)
2019-05-14 00:00:00
Amazon Linux 2 : setup (ALAS-2019-1158)
2019-02-14 00:00:00
RHEL 5 : setup (Unpatched Vulnerability)
2024-05-11 00:00:00
oraclelinux
oraclelinux
setup security and bug fix update
2018-11-05 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for setup (EulerOS-SA-2018-1394)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for setup (EulerOS-SA-2018-1421)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for setup (EulerOS-SA-2019-1409)
2020-01-23 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in setup affects PowerKVM
2018-12-17 14:20:01
Security Bulletin: IBM Cloud Private for Data is affected by vulnerabilities in the Setup package. CVE-2018-1113
2019-10-03 22:50:40
Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.
2019-09-17 15:34:01
cve
cve
CVE-2018-1113
2018-07-03 01:29:00
cvelist
cvelist
CVE-2018-1113
2018-07-02 18:00:00
amazon
amazon
Low: setup
2019-02-13 18:26:00
prion
prion
Design/Logic Flaw
2018-07-03 01:29:00
redhatcve
redhatcve
CVE-2018-1113
2018-04-24 12:18:45
nvd
nvd
CVE-2018-1113
2018-07-03 01:29:00
fedora
fedora
[SECURITY] Fedora 28 Update: setup-2.11.4-1.fc28
2018-04-27 04:16:54
centos
centos
setup security update
2018-11-15 18:52:27

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

23.1%

JSON
Related for RHSA-2018:3249
nessus14oraclelinux1openvas3ibm3cve1cvelist1amazon1prion1redhatcve1nvd1fedora1centos1