A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote NewStart CGSL host, running version MAIN 4.05, has yum-utils packages installed that are affected by a vulnerability:

  - A directory traversal issue was found in reposync, a     part of yum-utils, where reposync fails to sanitize     paths in remote repository configuration files. If an     attacker controls a repository, they may be able to copy     files outside of the destination directory on the     targeted system via path traversal. If reposync is     running with heightened privileges on a targeted system,     this flaw could potentially result in system compromise     via the overwriting of critical system files.
    (CVE-2018-10897)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has yum-utils packages installed that are affected by a vulnerability:

  - A directory traversal issue was found in reposync, a     part of yum-utils, where reposync fails to sanitize     paths in remote repository configuration files. If an     attacker controls a repository, they may be able to copy     files outside of the destination directory on the     targeted system via path traversal. If reposync is     running with heightened privileges on a targeted system,     this flaw could potentially result in system compromise     via the overwriting of critical system files.
    (CVE-2018-10897)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the yum-utils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A directory traversal issue was found in reposync, a     part of yum-utils, where reposync fails to sanitize     paths in remote repository configuration files. If an     attacker controls a repository, they may be able to     copy files outside of the destination directory on the     targeted system via path traversal. If reposync is     running with heightened privileges on a targeted     system, this flaw could potentially result in system     compromise via the overwriting of critical system     files. Version 1.1.31 and older are believed to be     affected.(CVE-2018-10897)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A directory traversal issue was found in reposync, a     part of yum-utils, where reposync fails to sanitize     paths in remote repository configuration files. If an     attacker controls a repository, they may be able to     copy files outside of the destination directory on the     targeted system via path traversal. If reposync is     running with heightened privileges on a targeted     system, this flaw could potentially result in system     compromise via the overwriting of critical system     files.i1/4^CVE-2018-10897i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A directory traversal issue was found in reposync, a     part of yum-utils, where reposync fails to sanitize     paths in remote repository configuration files. If an     attacker controls a repository, they may be able to     copy files outside of the destination directory on the     targeted system via path traversal. If reposync is     running with heightened privileges on a targeted     system, this flaw could potentially result in system     compromise via the overwriting of critical system     files. Version 1.1.31 and older are believed to be     affected.(CVE-2018-10897)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

**createrepo_c**

  - Include file timestamp in repomd.xml to allow     reproducing exact metadata as produced in the past

  - Support of zchunk

**libcomps**

**librepo**

  - Add zchunk support

**libdnf**

  - Enhance modular solver to handle enabled and default     module streams differently (RhBug:1648839)

  - Add support of wild cards for modules (RhBug:1644588)

  - Revert commit that adds best as default behavior

**dnf**

  - Updated difference YUM vs. DNF for yum-updateonboot

  - Added new command ``dnf alias [options]     [list|add|delete] [<name>...]`` to allow the user to     define and manage a list of aliases

  - Enhanced documentation

  - Unifying return codes for remove operations

  - [transaction] Make transaction content available for     commands

  - Triggering transaction hooks if no transaction     (RhBug:1650157)

  - Add hotfix packages to install pool (RhBug:1654738)

  - Report group operation in transaction table

  - [sack] Change algorithm to calculate rpmdb_version

  - Allow to enable modules that break default modules     (RhBug:1648839)

  - Enhance documentation - API examples

  - Add --nobest option

  - Revert commit that adds best as default behavior

**dnf-plugins-core**

  - [download] Do not download src without ``--source``     (RhBug:1666648)

**dnf-plugins-extras**

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the remote Junos Space version is 18.4.x prior to 18.4R1. It is, therefore, affected by multiple vulnerabilities : 

  - An integer overflow issue exists in procps-ng. This is     related to CVE-2018-1124. (CVE-2018-1126)

  - A directory traversal issue exits in reposync, a part     of yum-utils.tory configuration files. If an attacker     controls a repository, they may be able to copy files     outside of the destination directory on the targeted     system via path traversal. (CVE-2018-10897)

  - An integer overflow flaw was found in the Linux     kernel's create_elf_tables() function. An unprivileged     local user with access to SUID binary could use this     flaw to escalate their privileges on the system.
    (CVE-2018-14634)

Additionally, Junos Space is affected by several other vulnerabilities exist as noted in the vendor advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2018-10897

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - yum-utils: reposync: improper path validation may lead     to directory traversal (CVE-2018-10897)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - yum-utils: reposync: improper path validation may lead     to directory traversal (CVE-2018-10897)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2626 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-     virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed     using a special build of Red Hat Enterprise Linux with only the packages required to host virtual     machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing     administrative tasks.

    Security Fix(es):

    * yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Jay Grizzard (Clover Network) and Aaron Levy (Clover Network) for reporting     this issue.

    Bug fix:

    * This update rebases imgbased to version 1.0.24. This update fixes the issue with removing broken     symlinks when synchronizing layers. (BZ#1598781) (BZ#1622025)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. (CVE-2018-10897)

An update for yum-utils is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The yum-utils packages provide a collection of utilities and examples for the yum package manager to make yum easier and more powerful to use.

Security Fix(es) :

* yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Jay Grizzard (Clover Network) and Aaron Levy (Clover Network) for reporting this issue.

An update for yum-utils is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The yum-utils packages provide a collection of utilities and examples for the yum package manager to make yum easier and more powerful to use.

Security Fix(es) :

* yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Jay Grizzard (Clover Network) and Aaron Levy (Clover Network) for reporting this issue.

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files.(CVE-2018-10897)

Security Fix(es) :

  - yum-utils: reposync: improper path validation may lead     to directory traversal (CVE-2018-10897)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2285 advisory.

    The yum-utils packages provide a collection of utilities and examples for the yum package manager to make     yum easier and more powerful to use.

    Security Fix(es):

    * yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Jay Grizzard (Clover Network) and Aaron Levy (Clover Network) for reporting     this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2284 advisory.

  - yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2285 advisory.

    [1.1.31-46.0.1]
    - needs-restarting not checking kernel-uek for reboot message [Orabug 27189714]
    - add bug27596617.patch to remove upstream URL reference

    [1.1.31-46]
    - reposync: prevent path traversal.
    - Resolves: bug#1600617

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2284 advisory.

    [1.1.30-42.0.1]
    - add dependency btrfs-progs for yum-plugin-fs-snapshot (guangyu.sun@oracle.com) [bug 16285176]
    - use unified btrfs binary instead of btrfsctl (guangyu.sun@oracle.com) [bug 16285176]

    [-1.1.30-42]
    - reposync: prevent path traversal.
    - Resolves: bug#1600619

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
199536	RHEL 5 : yum-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195707	RHEL 5 : yum-utils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
127390	NewStart CGSL MAIN 4.05 : yum-utils Vulnerability (NS-SA-2019-0133)	Nessus	NewStart CGSL Local Security Checks	high
127184	NewStart CGSL CORE 5.04 / MAIN 5.04 : yum-utils Vulnerability (NS-SA-2019-0024)	Nessus	NewStart CGSL Local Security Checks	high
124918	EulerOS Virtualization for ARM 64 3.0.1.0 : yum-utils (EulerOS-SA-2019-1415)	Nessus	Huawei Local Security Checks	high
123846	EulerOS Virtualization 2.5.3 : yum-utils (EulerOS-SA-2019-1160)	Nessus	Huawei Local Security Checks	high
122702	EulerOS Virtualization 2.5.2 : yum-utils (EulerOS-SA-2019-1080)	Nessus	Huawei Local Security Checks	high
122354	Fedora 29 : createrepo_c / dnf / dnf-plugins-core / dnf-plugins-extras / etc (2019-1fccede810)	Nessus	Fedora Local Security Checks	high
121068	Juniper Junos Space 18.4.x < 18.4R1 Multiple Vulnerabilities (JSA10917)	Nessus	Junos Local Security Checks	critical
120412	Fedora 28 : yum-utils (2018-4f0089c995)	Nessus	Fedora Local Security Checks	high
120345	Fedora 29 : yum-utils (2018-357e8e07ce)	Nessus	Fedora Local Security Checks	high
118437	EulerOS Virtualization 2.5.0 : yum-utils (EulerOS-SA-2018-1349)	Nessus	Huawei Local Security Checks	high
118415	EulerOS Virtualization 2.5.1 : yum-utils (EulerOS-SA-2018-1327)	Nessus	Huawei Local Security Checks	high
117763	EulerOS 2.0 SP3 : yum-utils (EulerOS-SA-2018-1320)	Nessus	Huawei Local Security Checks	high
117762	EulerOS 2.0 SP2 : yum-utils (EulerOS-SA-2018-1319)	Nessus	Huawei Local Security Checks	high
117323	RHEL 7 : Red Hat Virtualization (RHSA-2018:2626)	Nessus	Red Hat Local Security Checks	high
112088	Amazon Linux 2 : yum-utils (ALAS-2018-1063)	Nessus	Amazon Linux Local Security Checks	high
111615	CentOS 7 : yum-utils (CESA-2018:2285)	Nessus	CentOS Local Security Checks	high
111614	CentOS 6 : yum-utils (CESA-2018:2284)	Nessus	CentOS Local Security Checks	high
111612	Amazon Linux AMI : yum-utils (ALAS-2018-1057)	Nessus	Amazon Linux Local Security Checks	high
111497	Scientific Linux Security Update : yum-utils on SL7.x (noarch) (20180730)	Nessus	Scientific Linux Local Security Checks	high
111496	Scientific Linux Security Update : yum-utils on SL6.x (noarch) (20180730)	Nessus	Scientific Linux Local Security Checks	high
111490	RHEL 7 : yum-utils (RHSA-2018:2285)	Nessus	Red Hat Local Security Checks	high
111489	RHEL 6 : yum-utils (RHSA-2018:2284)	Nessus	Red Hat Local Security Checks	high
111483	Oracle Linux 7 : yum-utils (ELSA-2018-2285)	Nessus	Oracle Linux Local Security Checks	high
111482	Oracle Linux 6 : yum-utils (ELSA-2018-2284)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2018-10897

high

Tenable Plugins

high

high

high

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high