PT-2018-1240 · Linux+2 · Linux Kernel+2
Wen Xu
·
Publicado
2018-03-29
·
Atualizado
2023-02-13
·
CVE-2018-1095
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.15.15
Description
The issue is related to the
ext4 xattr check entries function in the Linux kernel, which does not properly validate xattr sizes. This causes misinterpretation of a size as an error code, allowing attackers to cause a denial of service via a crafted ext4 image, resulting in a system crash due to a NULL pointer dereference.Recommendations
For Linux kernel versions through 4.15.15, update to a version that includes the fix for the
ext4 xattr check entries function issue to prevent denial of service attacks.Exploit
Correção
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Ubuntu