PT-2018-11489 · Linux+1 · Linux Kernel+1
Cornelius Aschermann
+1
·
Publicado
2018-06-28
·
Atualizado
2026-05-26
·
CVE-2018-12930
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 4.15.0
Description
The issue is related to the ntfs end buffer async read function in the ntfs.ko filesystem driver, which allows attackers to trigger a stack-based out-of-bounds write. This can cause a denial of service, resulting in a kernel oops or panic, and may have other unspecified impacts. The attack can be initiated via a crafted ntfs filesystem.
Recommendations
For Linux kernel version 4.15.0, consider upgrading to a newer version that includes a fix for this issue. As a temporary workaround, restrict access to the ntfs.ko filesystem driver to minimize the risk of exploitation. Avoid using the ntfs filesystem until the issue is resolved.
Correção
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel