PT-2018-10197 · Linux+5 · Linux Kernel+5

Dan Carpenter

·

Publicado

2018-05-06

·

Atualizado

2019-04-27

·

CVE-2018-10940

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.16.6
Description The issue is related to an incorrect bounds check in the CDROM driver CDROM MEDIA CHANGED ioctl, which allows local attackers to read out kernel memory.
Recommendations For Linux kernel versions prior to 4.16.6, update to version 4.16.6 or later to resolve the issue.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-1659
ALT-PU-2018-2679
ALT-PU-2018-2726
ALT-PU-2018-2729
ALT-PU-2018-2814
ALT-PU-2019-1433
CESA-2018_3083
CVE-2018-10940
DLA-1392-1
DLA-1422-1
DLA-1422-2
DLA-1423-1
OPENSUSE-SU-2018_2738-1
OPENSUSE-SU-2018_3071-1
RHSA-2018:2948
RHSA-2018:3083
RHSA-2018:3096
RHSA-2018_3083
RHSA-2018_3096
SUSE-SU-2018:2858-1
SUSE-SU-2018:2879-1
SUSE-SU-2018:2907-1
SUSE-SU-2018:2908-1
SUSE-SU-2018:2908-2
SUSE-SU-2018:2980-1
SUSE-SU-2018:2981-1
SUSE-SU-2018:3083-1
SUSE-SU-2018:3084-1
SUSE-SU-2018:3088-1
SUSE-SU-2018:3961-1
USN-3676-1
USN-3676-2
USN-3695-1
USN-3695-2
USN-3754-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu