PT-2018-16911 · Linux+4 · Linux Kernel+4

范龙飞 · Publicado 2018-01-12 · Atualizado 2020-08-24 · CVE-2018-5344

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.13

Description The issue is related to the mishandling of lo release serialization in the Linux kernel, which can be exploited by attackers to cause a denial of service or possibly have other unspecified impacts.

Recommendations For versions prior to 4.14.13, update to a version that contains a fix for this issue.

Exploit

Correção

DoS

Race Condition

Use After Free

Enumeração de Fraquezas

CWE-362

CWE-416

Identificadores relacionados

ALT-PU-2018-1048

ALT-PU-2018-1991

CESA-2018_3083

CVE-2018-5344

RHSA-2018:2948

RHSA-2018:3083

RHSA-2018:3096

RHSA-2018_3083

RHSA-2018_3096

USN-3583-1

USN-3583-2

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3632-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

Referências · 105

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/bpf_sign_extension_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-16995.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/Al1ex/CVE-2017-16995 · Exploit
• 🔥 https://github.com/GeneBlue/CVE-2017-10661_POC · Exploit
• 🔥 https://github.com/es0j/CVE-2023-0045 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2023-0045 · Exploit
• https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 · Correção
• https://ubuntu.com/security/notices/USN-3617-2 · Aviso do Fabricante
• https://usn.ubuntu.com/3617-3 · Aviso do Fabricante