PT-2018-14429 · Linux+3 · Linux Kernel+3

Tetsuo Handa

·

Publicado

2018-01-09

·

Atualizado

2019-05-28

·

CVE-2018-18386

CVSS v3.1

3.3

Baixa

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.11
Description The issue arises from an EXTPROC versus ICANON confusion in TIOCINQ, allowing local attackers who have access to pseudo terminals to hang or block further usage of any pseudo terminal devices.
Recommendations For Linux kernel versions prior to 4.14.11, update to version 4.14.11 or later to resolve the issue.

Correção

Incorrect Type Conversion or Cast

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-704

Identificadores relacionados

ALT-PU-2018-1016
ALT-PU-2018-1991
CVE-2018-18386
OPENSUSE-SU-2018_3658-1
OPENSUSE-SU-2018_3817-1
RHSA-2019:0831
SUSE-SU-2018:3589-1
SUSE-SU-2018:3593-1
SUSE-SU-2018:3659-1
SUSE-SU-2018:3688-1
SUSE-SU-2018:3689-1
SUSE-SU-2018:3746-1
SUSE-SU-2018:3772-1
SUSE-SU-2018:3773-1
SUSE-SU-2018:3787-1
SUSE-SU-2018:3865-1
SUSE-SU-2018:3869-1
SUSE-SU-2018:3880-1
SUSE-SU-2018:3934-1
SUSE-SU-2018:3961-1
SUSE-SU-2018:4069-1
SUSE-SU-2018:4072-1
SUSE-SU-2018_3772-1
SUSE-SU-2018_3787-1
SUSE-SU-2018_3880-1
SUSE-SU-2019:0095-1
SUSE-SU-2019:0439-1
SUSE-SU-2019:1289-1
SUSE-SU-2019:13937-1
USN-3849-1
USN-3849-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu