PT-2018-17123 · Linux+4 · Linux Kernel+4

Wang Qize

·

Publicado

2018-01-26

·

Atualizado

2019-03-07

·

CVE-2018-5750

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.16
Description: The issue allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call. This is due to a problem in the acpi smbus hc add function in drivers/acpi/sbshc.c.
Recommendations: For Linux kernel versions prior to 4.14.16, update to version 4.14.16 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2018-1111
ALT-PU-2018-1991
CESA-2018_1062
CVE-2018-5750
DLA-1369-1
DSA-4120-1
DSA-4120-2
DSA-4187-1
RHSA-2018:0676
RHSA-2018:1062
RHSA-2018:2948
RHSA-2018_0676
RHSA-2018_1062
USN-3631-1
USN-3631-2
USN-3697-1
USN-3697-2
USN-3698-1
USN-3698-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Ubuntu