CVE-2024-4871

Description

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker's ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.

Reserved 2024-05-14 | Published 2024-05-14 | Updated 2024-12-24 | Assigner redhat

Problem types

Key Exchange without Entity Authentication

Product status

3.9.1.8
affected

Default status
affected

0:4.3.14-1.el8sat before *
unaffected

Default status
affected

0:3.9.1.8-1.el8sat before *
unaffected

Default status
affected

1:3.9.3.2-1.el8sat before *
unaffected

Default status
affected

0:2.16.9-1.el8pc before *
unaffected

Default status
affected

0:3.39.15-1.el8pc before *
unaffected

Default status
affected

0:1.8.3-1.el8sat before *
unaffected

Default status
affected

0:13.0.6-1.el8sat before *
unaffected

Default status
affected

0:12.0.7-1.el8sat before *
unaffected

Default status
affected

0:4.11.0.15-1.el8sat before *
unaffected

Default status
affected

0:3.0.0-1.el8sat before *
unaffected

Default status
affected

0:0.10.6-1.el8sat before *
unaffected

Default status
affected

0:6.15.2-1.el8sat before *
unaffected

Default status
affected

0:4.3.14-1.el8sat before *
unaffected

Default status
affected

0:3.9.1.8-1.el8sat before *
unaffected

Default status
affected

1:3.9.3.2-1.el8sat before *
unaffected

Default status
affected

0:2.16.9-1.el8pc before *
unaffected

Default status
affected

0:3.39.15-1.el8pc before *
unaffected

Default status
affected

0:1.8.3-1.el8sat before *
unaffected

Default status
affected

0:13.0.6-1.el8sat before *
unaffected

Default status
affected

0:12.0.7-1.el8sat before *
unaffected

Default status
affected

0:4.11.0.15-1.el8sat before *
unaffected

Default status
affected

0:3.0.0-1.el8sat before *
unaffected

Default status
affected

0:0.10.6-1.el8sat before *
unaffected

Default status
affected

0:6.15.2-1.el8sat before *
unaffected

Timeline

2024-05-02:	Reported to Red Hat.
2024-05-14:	Made public.

References

access.redhat.com/errata/RHBA-2024:4589 (RHBA-2024:4589) vendor-advisory

access.redhat.com/security/cve/CVE-2024-4871 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2278627 (RHBZ#2278627) issue-tracking

cve.org (CVE-2024-4871)

nvd.nist.gov (CVE-2024-4871)

Download JSON