A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0036 advisory.

    Source-to-Image (S2I) is a tool for building reproducible container images. It produces ready-to-run     images by injecting a user source into a container image and assembling a new container image. The new     image incorporates the base image (the builder) and built source, and is ready to use with the docker     run command. S2I supports incremental builds, which re-use previously downloaded dependencies, previously     built artifacts, and more.

    The following packages have been upgraded to a later upstream version: source-to-image (1.1.13).
    (BZ#1654243)

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Michael Hanselmann (hansmi.ch) for reporting this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1243 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1242

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1241 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1240

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1239 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1238

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1237 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1236

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1235 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1234

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    This update also fixes the following bugs:

    * Image validation used to validate old image objects, and an invalid image could be pushed to etcd. With     this bug fix, validation has been changed to validate new image objects, and as a result it is no longer     possible to upload an invalid image object. (BZ#1559991)

    * A panic could occur due to concurrent writes to cache. This bug fix protects writes to the cache with     mutex. As a result, the cache is safe to use concurrently. (BZ#1549902)

    * Fluentd fails to properly process messages when it is unable to determine the namespace and pod UUIDs.
    The logging pipeline produces many messages and sometimes blocks log flow to Elasticsearch. This bug fix     checks for the missing fields and sets the record as orphaned, if needed. As a result, logs now continue     to flow and orphaned records end up in an orphaned namespace. (BZ#1520629)

    * The Add Donut char to Dashboard button is always visible, even when the application does not include a     dashboard, and click on the button does not do anything. This bug fix removes the button, as a result the     the feature is not available, as it should be. (BZ#1551503)

    This update also adds the following enhancement:

    *  An `.operations` index-mapping in a non-ops Elasticsearch cluster is no longer displayed because     operations indices will never exist in a non-ops Elasticsearch cluster. (BZ#1519709)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1233 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1232

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    This update also fixes the following bugs:

    * Image validation used to validate old image objects, and an invalid image could be pushed to etcd. With     this bug fix, validation has been changed to validate new image objects, and as a result it is no longer     possible to upload an invalid image object. (BZ#1559982)

    * A panic could occur due to concurrent writes to cache. This bug fix protects writes to the cache with     mutex. As a result, the cache is safe to use concurrently. (BZ#1549916)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1231 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1230

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    This update also fixes the following bugs:

    * Fluentd inserts documents (logs) into Elasticsearch using the bulk insert API, but relies upon     Elasticsearch to generate UUIDs for each document. It does not remove successfully indexed documents from     the bulk payload when the bulk operation fails. This caused the initial payload to be resubmitted and     documents that were successfully indexed to be submitted again, which results in duplicate documents with     different UUIDs. This bug fix ensures that document IDs are generated before submitting bulk insert     requests. As a result, Elasticsearch will disregard the insertion of documents that already exist in the     data store and insert documents that do not. (BZ#1556896)

    * A user can set a host name to `localhost`, which confuses the router check to see if the reload     completed. This caused the reload to never return success, causing the router to fail. This bug fix     changes the health check so that it does not pass the host name `localhost`. As a result, routers can now     reload successfully. (BZ#1548102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1229 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1228

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1227 advisory.

    Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS)     solution designed for on-premise or private cloud deployments.

    This advisory contains RPM packages for this release. See the following advisory for the container images     for this release:

    https://access.redhat.com/errata/RHBA-2018:1226

    Security Fix(es):

    * source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go     (CVE-2018-1102)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
194030	RHEL 7 : source-to-image (RHSA-2019:0036)	Nessus	Red Hat Local Security Checks	high
119400	RHEL 7 : OpenShift Container Platform 3.1 (RHSA-2018:1243)	Nessus	Red Hat Local Security Checks	high
119399	RHEL 7 : OpenShift Container Platform 3.2 (RHSA-2018:1241)	Nessus	Red Hat Local Security Checks	high
119398	RHEL 7 : OpenShift Container Platform 3.3 (RHSA-2018:1239)	Nessus	Red Hat Local Security Checks	high
119397	RHEL 7 : OpenShift Container Platform 3.4 (RHSA-2018:1237)	Nessus	Red Hat Local Security Checks	high
119396	RHEL 7 : OpenShift Container Platform 3.5 (RHSA-2018:1235)	Nessus	Red Hat Local Security Checks	high
119395	RHEL 7 : OpenShift Container Platform 3.6 (RHSA-2018:1233)	Nessus	Red Hat Local Security Checks	high
119394	RHEL 7 : OpenShift Container Platform 3.7 (RHSA-2018:1231)	Nessus	Red Hat Local Security Checks	high
119393	RHEL 7 : OpenShift Container Platform 3.8 (RHSA-2018:1229)	Nessus	Red Hat Local Security Checks	high
119392	RHEL 7 : OpenShift Container Platform 3.9 (RHSA-2018:1227)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2018-1102

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high