Bug 1649693 (CVE-2018-8416)

Summary:	CVE-2018-8416 .NET Core: Arbitrary file and directory creation
Product:	[Other] Security Response	Reporter:	Andrej Nemec <anemec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	andrew.slice, bodavis, dbhole, kanderso, omajid, rwagner
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-06-10 10:42:41 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1649694, 1650145
Bug Blocks:	1649695

Description Andrej Nemec 2018-11-14 09:15:41 UTC

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.

External References:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8416

Comment 2 Andrej Nemec 2018-11-14 16:11:25 UTC

Upstream pull request:

https://github.com/dotnet/corefx/pull/32127

Comment 10 errata-xmlrpc 2018-11-27 04:30:46 UTC

This issue has been addressed in the following products:

  .NET Core on Red Hat Enterprise Linux

Via RHSA-2018:3676 https://access.redhat.com/errata/RHSA-2018:3676