PT-2018-11597 · Linux+5 · Linux Kernel+5

Wen Xu

·

Publicado

2018-07-03

·

Atualizado

2020-03-02

·

CVE-2018-13094

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.4
Description An issue was discovered in the Linux kernel that may cause an OOPS for a corrupted xfs image after the function xfs da shrink inode() is called with a NULL bp.
Recommendations For Linux kernel versions prior to 4.17.4, update to version 4.17.4 or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1971
ALT-PU-2018-1976
ALT-PU-2019-1433
CESA-2019_2029
CVE-2018-13094
DLA-1529-1
DLA-2114-1
OPENSUSE-SU-2018_2738-1
OPENSUSE-SU-2018_3071-1
RHSA-2019:0831
RHSA-2019:2029
RHSA-2019:2043
RHSA-2019_2029
RHSA-2019_2043
SUSE-SU-2018:2775-1
SUSE-SU-2018:2776-1
SUSE-SU-2018:2858-1
SUSE-SU-2018:2862-1
SUSE-SU-2018:2980-1
SUSE-SU-2018:2981-1
SUSE-SU-2018:3084-1
USN-3752-1
USN-3752-2
USN-3752-3
USN-3753-1
USN-3753-2
USN-3754-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu