Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-3899

Fixed in a distro release EPSS <1%CVSS 7.8

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

Published 2023-08-23 · CVE record · OSV

Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 8dnf-plugin-subscription-manager1.28.36-3.el8_8.alma.1
AlmaLinux 8python3-cloud-what1.28.36-3.el8_8.alma.1
AlmaLinux 8python3-subscription-manager-rhsm1.28.36-3.el8_8.alma.1
AlmaLinux 8python3-syspurpose1.28.36-3.el8_8.alma.1
AlmaLinux 8subscription-manager1.28.36-3.el8_8.alma.1
AlmaLinux 8subscription-manager-migration1.28.36-3.el8_8.alma.1
AlmaLinux 8subscription-manager-plugin-ostree1.28.36-3.el8_8.alma.1
AlmaLinux 8subscription-manager-rhsm-certificates1.28.36-3.el8_8.alma.1
AlmaLinux 9libdnf-plugin-subscription-manager1.29.33.1-2.el9_2.alma.1
AlmaLinux 9python3-cloud-what1.29.33.1-2.el9_2.alma.1
AlmaLinux 9python3-subscription-manager-rhsm1.29.33.1-2.el9_2.alma.1
AlmaLinux 9subscription-manager1.29.33.1-2.el9_2.alma.1
AlmaLinux 9subscription-manager-plugin-ostree1.29.33.1-2.el9_2.alma.1
Red Hat Enterprise Linux 7python-syspurpose0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7rhsm-gtk0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-cockpit0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-debuginfo0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-gui0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-initial-setup-addon0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-migration0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-plugin-container0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-plugin-ostree0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-rhsm0:1.24.52-2.el7_9
Red Hat Enterprise Linux 7subscription-manager-rhsm-certificates0:1.24.52-2.el7_9
Red Hat Enterprise Linux 8dnf-plugin-subscription-manager0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8dnf-plugin-subscription-manager-debuginfo0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8python3-cloud-what0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8python3-subscription-manager-rhsm0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8python3-subscription-manager-rhsm-debuginfo0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8python3-syspurpose0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8rhsm-gtk0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8rhsm-icons0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-cockpit0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-debuginfo0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-debugsource0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-initial-setup-addon0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-migration0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-plugin-ostree0:1.28.36-3.el8_8
Red Hat Enterprise Linux 8subscription-manager-rhsm-certificates0:1.28.36-3.el8_8
Red Hat Enterprise Linux 9libdnf-plugin-subscription-manager0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9libdnf-plugin-subscription-manager-debuginfo0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9python3-cloud-what0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9python3-subscription-manager-rhsm0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9python3-subscription-manager-rhsm-debuginfo0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9subscription-manager0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9subscription-manager-debuginfo0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9subscription-manager-debugsource0:1.29.33.1-2.el9_2
Red Hat Enterprise Linux 9subscription-manager-plugin-ostree0:1.29.33.1-2.el9_2
Red Hat rhel aus 8.2dnf-plugin-subscription-manager0:1.26.22-2.el8_2
Red Hat rhel aus 8.2dnf-plugin-subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel aus 8.2python3-subscription-manager-rhsm0:1.26.22-2.el8_2
Red Hat rhel aus 8.2python3-subscription-manager-rhsm-debuginfo0:1.26.22-2.el8_2
Red Hat rhel aus 8.2python3-syspurpose0:1.26.22-2.el8_2
Red Hat rhel aus 8.2rhsm-gtk0:1.26.22-2.el8_2
Red Hat rhel aus 8.2rhsm-icons0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-cockpit0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-debugsource0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-initial-setup-addon0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-migration0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-plugin-ostree0:1.26.22-2.el8_2
Red Hat rhel aus 8.2subscription-manager-rhsm-certificates0:1.26.22-2.el8_2
Red Hat rhel aus 8.4dnf-plugin-subscription-manager0:1.28.13-7.el8_4
Red Hat rhel aus 8.4dnf-plugin-subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel aus 8.4python3-subscription-manager-rhsm0:1.28.13-7.el8_4
Red Hat rhel aus 8.4python3-subscription-manager-rhsm-debuginfo0:1.28.13-7.el8_4
Red Hat rhel aus 8.4python3-syspurpose0:1.28.13-7.el8_4
Red Hat rhel aus 8.4rhsm-gtk0:1.28.13-7.el8_4
Red Hat rhel aus 8.4rhsm-icons0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-cockpit0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-debugsource0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-initial-setup-addon0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-migration0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-plugin-ostree0:1.28.13-7.el8_4
Red Hat rhel aus 8.4subscription-manager-rhsm-certificates0:1.28.13-7.el8_4
Red Hat rhel e4s 8.1dnf-plugin-subscription-manager0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1dnf-plugin-subscription-manager-debuginfo0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1python3-subscription-manager-rhsm0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1python3-subscription-manager-rhsm-debuginfo0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1python3-syspurpose0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1rhsm-gtk0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-cockpit0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-debuginfo0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-debugsource0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-initial-setup-addon0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-migration0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-plugin-container0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-plugin-ostree0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.1subscription-manager-rhsm-certificates0:1.25.17.1-2.el8_1
Red Hat rhel e4s 8.2dnf-plugin-subscription-manager0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2dnf-plugin-subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2python3-subscription-manager-rhsm0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2python3-subscription-manager-rhsm-debuginfo0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2python3-syspurpose0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2rhsm-gtk0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2rhsm-icons0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-cockpit0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-debugsource0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-initial-setup-addon0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-migration0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-plugin-ostree0:1.26.22-2.el8_2
Red Hat rhel e4s 8.2subscription-manager-rhsm-certificates0:1.26.22-2.el8_2
Red Hat rhel e4s 8.4dnf-plugin-subscription-manager0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4dnf-plugin-subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4python3-subscription-manager-rhsm0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4python3-subscription-manager-rhsm-debuginfo0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4python3-syspurpose0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4rhsm-gtk0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4rhsm-icons0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-cockpit0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-debugsource0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-initial-setup-addon0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-migration0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-plugin-ostree0:1.28.13-7.el8_4
Red Hat rhel e4s 8.4subscription-manager-rhsm-certificates0:1.28.13-7.el8_4
Red Hat rhel eus 8.6dnf-plugin-subscription-manager0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6dnf-plugin-subscription-manager-debuginfo0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6python3-cloud-what0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6python3-subscription-manager-rhsm0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6python3-subscription-manager-rhsm-debuginfo0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6python3-syspurpose0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6rhsm-gtk0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6rhsm-icons0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-cockpit0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-debuginfo0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-debugsource0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-initial-setup-addon0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-migration0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-plugin-ostree0:1.28.29.1-2.el8_6
Red Hat rhel eus 8.6subscription-manager-rhsm-certificates0:1.28.29.1-2.el8_6
Red Hat rhel eus 9.0libdnf-plugin-subscription-manager0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0libdnf-plugin-subscription-manager-debuginfo0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0python3-cloud-what0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0python3-subscription-manager-rhsm0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0python3-subscription-manager-rhsm-debuginfo0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0rhsm-icons0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager-cockpit0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager-debuginfo0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager-debugsource0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager-plugin-ostree0:1.29.26.2-2.el9_0
Red Hat rhel eus 9.0subscription-manager-rhsm-certificates0:1.29.26.2-2.el9_0
Red Hat rhel tus 8.2dnf-plugin-subscription-manager0:1.26.22-2.el8_2
Red Hat rhel tus 8.2dnf-plugin-subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel tus 8.2python3-subscription-manager-rhsm0:1.26.22-2.el8_2
Red Hat rhel tus 8.2python3-subscription-manager-rhsm-debuginfo0:1.26.22-2.el8_2
Red Hat rhel tus 8.2python3-syspurpose0:1.26.22-2.el8_2
Red Hat rhel tus 8.2rhsm-gtk0:1.26.22-2.el8_2
Red Hat rhel tus 8.2rhsm-icons0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-cockpit0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-debuginfo0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-debugsource0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-initial-setup-addon0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-migration0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-plugin-ostree0:1.26.22-2.el8_2
Red Hat rhel tus 8.2subscription-manager-rhsm-certificates0:1.26.22-2.el8_2
Red Hat rhel tus 8.4dnf-plugin-subscription-manager0:1.28.13-7.el8_4
Red Hat rhel tus 8.4dnf-plugin-subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel tus 8.4python3-subscription-manager-rhsm0:1.28.13-7.el8_4
Red Hat rhel tus 8.4python3-subscription-manager-rhsm-debuginfo0:1.28.13-7.el8_4
Red Hat rhel tus 8.4python3-syspurpose0:1.28.13-7.el8_4
Red Hat rhel tus 8.4rhsm-gtk0:1.28.13-7.el8_4
Red Hat rhel tus 8.4rhsm-icons0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-cockpit0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-debuginfo0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-debugsource0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-initial-setup-addon0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-migration0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-plugin-ostree0:1.28.13-7.el8_4
Red Hat rhel tus 8.4subscription-manager-rhsm-certificates0:1.28.13-7.el8_4
Rocky Linux 8subscription-manager0:1.28.36-3.el8_8.rocky.0.1
Rocky Linux 9subscription-manager0:1.29.33.1-2.el9_2.rocky.0.1