PT-2018-11598 · Linux+3 · Linux Kernel+3

Wen Xu · Publicado 2017-12-08 · Atualizado 2022-10-07 · CVE-2018-13096

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.15 is not specified, however, the issue is in versions through 4.14.

Description An issue in the Linux kernel can cause a denial of service due to out-of-bounds memory access and BUG when mounting a crafted f2fs image with an abnormal bitmap size.

Recommendations For Linux kernel versions through 4.14, consider updating to a version that includes the necessary fixes to prevent out-of-bounds memory access when mounting f2fs images.

Correção

DoS

Memory Corruption

Out of bounds Read

Enumeração de Fraquezas

CWE-787

CWE-125

Identificadores relacionados

ALT-PU-2017-2771

ALT-PU-2018-1991

CVE-2018-13096

DLA-1715-1

OPENSUSE-SU-2018_3202-1

USN-3821-1

USN-3821-2

USN-4094-1

USN-4118-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 95

• https://osv.dev/vulnerability/USN-4094-1 · Aviso do Fabricante
• https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/commit/?h=dev&id=c77ec61ca0a49544ca81881cc5d5529858f7e196 · Nota
• https://usn.ubuntu.com/4094-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html · Aviso do Fabricante
• https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git/commit/?h=f2fs-dev&id=e335cc683fd13882b9152937b06ff3c16c28aa34 · Nota
• https://ubuntu.com/security/CVE-2018-13093 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-14614 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13631 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-20511 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-15220 · Aviso do Fabricante
• https://usn.ubuntu.com/3821-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-15214 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-9506 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4094-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10880 · Aviso do Fabricante