PT-2018-17632 · Canonical · Base-Files+1

Sander Bos · Publicado 2018-08-21 · Atualizado 2023-01-19 · CVE-2018-6557

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions base-files package in Ubuntu versions 18.04 before 10.1ubuntu2.2 base-files package in Ubuntu versions 18.10 before 10.1ubuntu6

Description The MOTD update script in the base-files package incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled.

Recommendations For Ubuntu 18.04 before 10.1ubuntu2.2, update to version 10.1ubuntu2.2 or later to resolve the issue. For Ubuntu 18.10 before 10.1ubuntu6, update to version 10.1ubuntu6 or later to resolve the issue.

Correção

DoS

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2018-6557

USN-3748-1

Produtos afetados

Ubuntu

Base-Files

Referências · 12

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-6557 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3748-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6557 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-3748-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-6557 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-6557 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-6557 · Aviso do Fabricante
• http://sbosnet.nl · Nota
• https://t.me/cvenotify/42360 · Publicação no Telegram
• http://securitytracker.com/id/1041530 · Nota
• http://securityfocus.com/bid/105148 · Nota
• https://usn.ubuntu.com/3748-1 · Aviso do Fabricante