CVE-2018-4054 Privilege escalation in Pixar Renderman

Critical 9.0 Published 8 Mar 2019 Updated 16 Sep 2024

A local privilege escalation flaw in Pixar Renderman's install helper allows attackers with local access to gain root privileges.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-4054?

CVE-2018-4054 is a critical vulnerability in Talos Pixar Renderman, published on 8 Mar 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.

Weakness: CWE-20

Which versions are affected by CVE-2018-4054?

It affects 1 product.

Products include Pixar Renderman.

How do I fix CVE-2018-4054?

No fix has been published for CVE-2018-4054 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-4054 being exploited?

There is no known exploitation of CVE-2018-4054 in the wild and no public exploit code.

Sources

Also known as GHSA-64f6-crjj-24hf.