CVE-2018-15869 Supply chain in n/a
Attackers can force execution of malicious code by tricking users into loading unverified public AMIs via AWS CLI without owner validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-15869?
CVE-2018-15869 is a medium-severity vulnerability in n/a, published on 25 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
Weakness: CWE-732
Which versions are affected by CVE-2018-15869?
It affects 1 product.
Linux distribution packages (12)
aws-cli SUSE:HPE Helion OpenStack 8 | All versions | 1.16.297-22.11.1 |
python-boto3 SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 1.9.57-3.5.1 |
python-botocore SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 1.12.57-3.5.1 |
python-s3transfer SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 0.1.13-3.3.6 |
python-boto3 SUSE:Linux Enterprise Module for Package Hub 15 | All versions | 1.9.57-3.5.1 |
python-botocore SUSE:Linux Enterprise Module for Package Hub 15 | All versions | 1.12.57-3.5.1 |
python-s3transfer SUSE:Linux Enterprise Module for Package Hub 15 | All versions | 0.1.13-3.3.6 |
aws-cli SUSE:Linux Enterprise Module for Public Cloud 12 | All versions | 1.16.297-22.11.1 |
aws-cli SUSE:Linux Enterprise Module for Public Cloud 15 | All versions | 1.16.61-4.7.1 |
aws-cli SUSE:OpenStack Cloud 8 | All versions | 1.16.297-22.11.1 |
aws-cli SUSE:OpenStack Cloud Crowbar 8 | All versions | 1.16.297-22.11.1 |
aws-cli openSUSE:Tumbleweed | All versions | 1.20.7-2.2 |
Products include Hashicorp Packer.
How do I fix CVE-2018-15869?
Change a configuration setting.
Is CVE-2018-15869 being exploited?
There is no known exploitation of CVE-2018-15869 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2018-15869, SUSE-RU-2018:4074-1, SUSE-SU-2020:0251-1, UBUNTU-CVE-2018-15869, openSUSE-SU-2024:10644-1.