CVE-2017-10689 Tarball permission preservation in puppet
Attackers can escalate privileges by installing modules with world-writable permissions in Puppet Agent, requiring an upgrade to secure the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-10689?
CVE-2017-10689 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 9 Feb 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
Weakness: CWE-269
Which versions are affected by CVE-2017-10689?
4 open source packages ship an affected version, including puppet. It affects 4 products.
| Package | Affected | Fixed in |
|---|---|---|
puppet RubyGems | All versions | 4.10.10 |
puppet RubyGems | All versions | 4.10.10 |
puppet RubyGems | From 5.0.0 | 5.3.4 |
puppet RubyGems | From 5.0.0 | 5.3.4 |
Linux distribution packages (4)
puppet SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 3.8.5-15.9.1 |
puppet SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 3.8.5-15.9.1 |
puppet SUSE:Linux Enterprise Module for Advanced Systems Management 12 | All versions | 3.8.5-15.9.1 |
rubygem-puppet SUSE:Linux Enterprise Module for Advanced Systems Management 12 | All versions | 4.8.1-32.3.1 |
Products include Canonical Ubuntu Linux, Puppet Puppet, Puppet Puppet Enterprise, Redhat Satellite.
How do I fix CVE-2017-10689?
Upgrade puppet to a fixed version for your release line: 4.10.10 or 5.3.4.
Is CVE-2017-10689 being exploited?
There is no known exploitation of CVE-2017-10689 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2017-10689, GHSA-vw22-465p-8j5w, MGASA-2018-0199, SUSE-SU-2018:0571-1, SUSE-SU-2018:0602-1, UBUNTU-CVE-2017-10689 and 1 more.