جزئیات آسیب‌پذیری
CVE-2026-6893
Red Hat Enterprise Linux 6Red Hat OpenShift Container Platform 4
Dracut: dracut: root code execution via dhcp options command injection
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۶- https://access.redhat.com/errata/RHSA-2026:67857 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:69118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:69119 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:70586 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:70615 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:74499 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:79114 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:90272 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-6893 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2459963 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6893.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:62269 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65839 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62409 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62549 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65851 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:63044 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26532 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26533 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57580 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26534 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61252 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57775 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57785 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57772 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26713 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۲۰
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- redhat
پیش‌بینی بهره‌برداری (EPSS)
۱٫۲۷٪
احتمال بهره‌برداری در ۳۰ روز
۷۰٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command