Improper input validation in [UNKNOWN] source-to-image
Priority MEDIUM 41CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.
Summary
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
Why it matters now
EPSS 0.01388 72nd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| [UNKNOWN] | source-to-image | atomic-openshift 3.7.53; atomic-openshift 3.9.31 | — | No fix listed | CNA |
- source-to-image Vendor[UNKNOWN] Affected atomic-openshift 3.7.53; atomic-openshift 3.9.31 Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* | before 3.7.53 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift_container_platform:3.9:*:*:*:*:*:*:* | 3.9 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift_container_platform:3.9.31:*:*:*:*:*:*:* | 3.9.31 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* Versions before 3.7.53 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift_container_platform:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift_container_platform:3.9.31:*:*:*:*:*:*:* Versions 3.9.31 Vulnerable ·Red Hat
Remediation
Red Hat 1 advisory
- RHSA-2018:2013 Released 2018-06-27 · Red Hat rating ImportantOpenShift Container Platform 3.9 security, bug fix, and enhancement update
- Red Hat OpenShift Container Platform 3.9 atomic-openshift-3.9.31-1.git.0.ef9737b.el7, atomic-openshift-clients-3.9.31-1.git.0.ef9737b.el7, atomic-openshift-clients-redistributable-3.9.31-1.git.0.ef9737b.el7 +23
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 3.9 | Fixed | RHSA-2018:2013 |
Not affected: 1 product
- Red Hat Software Collections
Timeline
- 2026-10-02 Threatist record created from CVE-2018-10843
- 2026-10-03 Alias added: GHSA-h5q5-9vcx-54g7
References
More Red Hat Openshift Container Platform vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
- TI-2026-34021 Linux kernel skb coalescing drops shared-frag marker KEVCVSS 3.1HIGH 7.8
- TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
Sources
- CVE-2018-10843 · CVE Program
- CVE-2018-10843 · NVD
- FIRST EPSS
- GHSA-h5q5-9vcx-54g7 · GitHub Advisory Database · CC BY 4.0
- CVE-2018-10843 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences