CVE-2019-3831
Fixed in a distro release EPSS 1%CVSS 6.4
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
Products: ovirt vdsm, redhat gluster_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | redhat-release-virtualization-host | 0:4.2-8.3.el7 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.2-20190219.0.el7_6 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.2-20190219.0.el7_6 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update-placeholder | 0:4.2-8.3.el7 |
| Red Hat Enterprise Linux 7 | vdsm | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-api | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-client | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-common | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-gluster | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-checkips | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-cpuflags | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-ethtool-options | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-extra-ipv4-addrs | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-fcoe | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-localdisk | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-macspoof | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-nestedvt | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-openstacknet | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-vhostmd | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-hook-vmfex-dev | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-http | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-jsonrpc | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-network | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-python | 0:4.20.47-1.el7ev |
| Red Hat Enterprise Linux 7 | vdsm-yajsonrpc | 0:4.20.47-1.el7ev |
| Red Hat storage 3.4 server el7 | ioprocess | 0:1.1.2-1.el7ev |
| Red Hat storage 3.4 server el7 | ioprocess-debuginfo | 0:1.1.2-1.el7ev |
| Red Hat storage 3.4 server el7 | python2-ioprocess | 0:1.1.2-1.el7ev |
| Red Hat storage 3.4 server el7 | safelease | 0:1.0-7.el7ev |
| Red Hat storage 3.4 server el7 | safelease-debuginfo | 0:1.0-7.el7ev |
| Red Hat storage 3.4 server el7 | vdsm | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-api | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-client | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-common | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-gluster | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-cpuflags | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-ethtool-options | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-faqemu | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-fcoe | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-localdisk | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-macspoof | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-openstacknet | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-qemucmdline | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-hook-vmfex-dev | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-http | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-jsonrpc | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-network | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-python | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-tests | 0:4.30.18-1.0.el7rhgs |
| Red Hat storage 3.4 server el7 | vdsm-yajsonrpc | 0:4.30.18-1.0.el7rhgs |