VyOS 1.1.8
Approved changes feed: RSS · Atom
cpe:2.3:o:vyos:vyos:1.1.8:*:*:*:*:*:*:*part: o version: 1.1.8 update: *
| Vendor | Vyos (94f5eb8b-53c4-5dd2-b0e3-5ba2aa8869d4) |
|---|---|
| Product | Vyos (7680a969-183c-5f31-a69f-b8a87bf4ea34) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/vyos/vyos-build |
purl2cpe | 2026-06-01 10:16:30.436638 |
pkg:github/vyos/vyos-build |
purl2cpe | 2026-06-01 10:16:30.436640 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-18556 |
vulnerable | 2026-06-08 05:11:14.236582 |
Details available
A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo) permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions and leverage its improper input validation condition to spawn an attacker-controlled shell with root privileges.
Published: 2018-12-17T18:00:00.000Z
Updated: 2024-08-05T11:15:59.672Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18555 |
vulnerable | 2026-06-08 05:11:14.236042 |
Details available
A sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell for operator users to administer the device. By issuing various shell special characters with certain commands, an authenticated operator user can break out of the management shell and gain access to the underlying Linux shell. The user can then run arbitrary operating system commands with the privileges afforded by their account.
Published: 2018-12-17T18:00:00.000Z
Updated: 2024-08-05T11:15:59.638Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.