PT-2018-10555 · Linux+2 · Linux Kernel+2

Jann Horn · Publicado 2018-05-24 · Atualizado 2019-03-15 · CVE-2018-11412

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.13 through 4.16.11

Description The issue arises in the Linux kernel when the ext4 read inline data() function in fs/ext4/inline.c performs a memcpy operation with an untrusted length value. This occurs under specific circumstances involving a crafted filesystem where the system.data extended attribute value is stored in a dedicated inode.

Recommendations For Linux kernel versions 4.13 through 4.16.11, consider updating to a version that contains a fix for this issue to prevent potential exploitation.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2018-1817

ALT-PU-2018-1943

ALT-PU-2019-1433

CVE-2018-11412

MGASA-2018-0324

MGASA-2018-0340

MGASA-2018-0341

RHSA-2019:0525

USN-3752-1

USN-3752-2

USN-3752-3

Produtos afetados

Alt Linux

Linux Kernel

Ubuntu

Referências · 68

• 🔥 https://exploit-db.com/exploits/44832 · Exploit
• 🔥 https://bugs.chromium.org/p/project-zero/issues/detail?id=1580 · Exploit
• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=199803 · Exploit
• https://ubuntu.com/security/CVE-2018-10323 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3752-2 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-11412 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11412 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-11412 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1120 · Aviso do Fabricante
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.59 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0324 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3752-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3752-3 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13094 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2018-0340.html · Nota de Segurança