CVE-2018-10843
Fixed in a distro release EPSS 1%CVSS 8.5
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
Products: redhat openshift_container_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.9 | atomic-openshift | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients-redistributable | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-cluster-capacity | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-descheduler | 0:3.9.13-1.git.267.bb59a3f.el7 |
| Red Hat openshift 3.9 | atomic-openshift-docker-excluder | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-dockerregistry | 0:3.9.31-1.git.351.1bd46ed.el7 |
| Red Hat openshift 3.9 | atomic-openshift-excluder | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-federation-services | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-master | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node-problem-detector | 0:3.9.13-1.git.167.5d6b0d4.el7 |
| Red Hat openshift 3.9 | atomic-openshift-pod | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-sdn-ovs | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-service-catalog | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-template-service-broker | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-tests | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-utils | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | atomic-openshift-web-console | 0:3.9.31-1.git.246.bded6a4.el7 |
| Red Hat openshift 3.9 | golang-github-prometheus-node_exporter | 0:3.9.31-1.git.890.a55de06.el7 |
| Red Hat openshift 3.9 | mysql-apb-role | 0:1.1.11-1.el7 |
| Red Hat openshift 3.9 | openshift-ansible | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-docs | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-playbooks | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-roles | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | prometheus-node-exporter | 0:3.9.31-1.git.890.a55de06.el7 |