Arbitrary Code Execution

2019-05-1603:56:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.8%

JSON

vdsm is vulnerable to arbitrary code execution attacks. An attacker could exploit a flaw in the systemd_run function to execute arbitrary commands as root.

CPENameOperatorVersion
redhat-virtualization-hosteq4.1__20170808.0.el7_4
redhat-virtualization-hosteq4.0__20170104.1.el7_3
redhat-virtualization-hosteq4.0__20160817.0.el7_2
redhat-virtualization-hosteq4.0__20161220.0.el7_3
redhat-virtualization-hosteq4.0__20160906.0.el7_2
redhat-virtualization-hosteq4.1__20180102.3.el7_4
redhat-virtualization-hosteq3.6__20180129.0.el7_3
redhat-virtualization-hosteq4.1__20171002.0.el7_4
redhat-virtualization-hosteq4.1__20170914.1.el7_4
redhat-virtualization-hosteq4.1__20170417.0.el7_3

Name	Operator	Version
redhat-virtualization-host	eq	4.1__20170808.0.el7_4
redhat-virtualization-host	eq	4.0__20170104.1.el7_3
redhat-virtualization-host	eq	4.0__20160817.0.el7_2
redhat-virtualization-host	eq	4.0__20161220.0.el7_3
redhat-virtualization-host	eq	4.0__20160906.0.el7_2
redhat-virtualization-host	eq	4.1__20180102.3.el7_4
redhat-virtualization-host	eq	3.6__20180129.0.el7_3
redhat-virtualization-host	eq	4.1__20171002.0.el7_4
redhat-virtualization-host	eq	4.1__20170914.1.el7_4
redhat-virtualization-host	eq	4.1__20170417.0.el7_3