What is CVE-2018-4055?

CVE-2018-4055 is a medium-severity vulnerability in Pixar Renderman, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2019-03-08.

How severe is CVE-2018-4055?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Improper input validation in Pixar Renderman

CVE-2018-4055

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Pixar Renderman — versions 22.2.0
Talos Pixar Renderman — versions Renderman 22.2.0 for Mac OS X

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

talos-cna@cisco.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-4055?: CVE-2018-4055 is a medium-severity vulnerability in Pixar Renderman, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2019-03-08.
How severe is CVE-2018-4055?: Medium severity. CVSS v3 base score is 5.5 out of 10.