Netdata 1.10.0 JSON web/api/web_api_v1.c tqx injection

Summaryinfo

A vulnerability labeled as critical has been found in Netdata 1.10.0. Affected is an unknown function of the file web/api/web_api_v1.c of the component JSON Handler. The manipulation of the argument tqx as part of Parameter results in injection. This vulnerability was named CVE-2018-18836. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability was found in Netdata 1.10.0. It has been classified as critical. Affected is an unknown part of the file web/api/web_api_v1.c of the component JSON Handler. The manipulation of the argument tqx as part of a Parameter leads to a injection vulnerability. CWE is classifying the issue as CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

The weakness was presented 06/18/2019 (GitHub Repository). The advisory is shared for download at github.com. This vulnerability is traded as CVE-2018-18836 since 10/30/2018. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1055.

The vulnerability scanner Nessus provides a plugin with the ID 214875 (Ubuntu 20.04 LTS / 24.10 : Netdata vulnerabilities (USN-7250-1)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (214875). See VDB-136609 and VDB-136610 for similar entries. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• Netdata

Version

• 1.10.0

License

• open-source

Website

• Product: https://github.com/netdata/netdata/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion