CVE-2019-3831
published 2019-03-25CVE-2019-3831: A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could…
PriorityP433medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
1.03%
59.8th percentile
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ovirt | vdsm | 4.19 – 4.30.3 | — |
| ovirt | vdsm | 4.30.5 – 4.30.8 | — |
| redhat | gluster_storage | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv3.06.4MEDIUMCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mgfj-qcpq-xx99: A vulnerability was discovered in vdsm, version 4
ghsa_unreviewed·2022-05-13
CVE-2019-3831 [HIGH] GHSA-mgfj-qcpq-xx99: A vulnerability was discovered in vdsm, version 4
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
Red Hat
vdsm: privilege escalation to root via systemd_run
vendor_redhat·2019-02-14·CVSS 6.7
CVE-2019-3831 [MEDIUM] CWE-863 vdsm: privilege escalation to root via systemd_run
vdsm: privilege escalation to root via systemd_run
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-3831 vdsm: privilege escalation to root via systemd_run [fedora-all]
bugzilla·2019-02-14·CVSS 6.7
CVE-2019-3831 [MEDIUM] CVE-2019-3831 vdsm: privilege escalation to root via systemd_run [fedora-all]
CVE-2019-3831 vdsm: privilege escalation to root via systemd_run [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions
Bugzilla
CVE-2019-3831 vdsm: privilege escalation to root via systemd_run
bugzilla·2019-02-14·CVSS 6.7
CVE-2019-3831 [MEDIUM] CVE-2019-3831 vdsm: privilege escalation to root via systemd_run
CVE-2019-3831 vdsm: privilege escalation to root via systemd_run
vdsm v4.19 through v4.30.3 and v4.30.5 through v4.30.8 exposed a systemd_run() function to the vdsm system user, which could be abused to run arbitrary commands as root. This breaks the defense-in-depth of having a non-root vdsm system account. While not exploitable by attackers under normal circumstances, this flaw could lead to a compromise of services running under the vdsm account being escalated to a full root compromise.
Upstream fix:
https://gerrit.ovirt.org/#/c/97659/
Originally introduced by:
commit e56541ccb372e106eeb4fc3f7afc575f8dd32de2
Author: Francesco Romani
Date: Fri Apr 22 10:15:54 2016 +0200
supervdsm: expose systemd utilities
Removed by:
commit f85f0527f1421618714e89eee03ee2f0400a65ae
Author: France
2019-03-25
Published