PT-2018-2382 · Linux+5 · Linux Kernel+5

Jann Horn

·

Publicado

2018-10-02

·

Atualizado

2020-10-15

·

CVE-2018-17972

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.18.11
Description An issue in the proc pid stack function allows a local attacker to exploit racy stack unwinding and leak kernel task stack contents due to inadequate access control. This enables an attacker to gain unauthorized access to protected information.
Recommendations For Linux kernel versions through 4.18.11, update to a version that includes a fix for the proc pid stack function issue to prevent unauthorized access to kernel task stack contents.

Correção

Race Condition

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362CWE-284

Identificadores relacionados

ALT-PU-2018-2420
ALT-PU-2018-2445
ALT-PU-2019-1433
BDU:2019-00570
CESA-2019_0512
CESA-2019_2473
CVE-2018-17972
DLA-1715-1
DLA-1731-1
DLA-1731-2
OPENSUSE-SU-2019_1407-1
RHSA-2019:0512
RHSA-2019:0514
RHSA-2019:0831
RHSA-2019:2473
RHSA-2019_0512
RHSA-2019_0514
RHSA-2019_2473
SUSE-SU-2019:14089-1
SUSE-SU-2019:1527-1
SUSE-SU-2019:1532-1
SUSE-SU-2019:1533-1
SUSE-SU-2019:1534-1
SUSE-SU-2019:1692-1
SUSE-SU-2019_14089-1
USN-3821-1
USN-3821-2
USN-3832-1
USN-3835-1
USN-3871-1
USN-3871-2
USN-3871-3
USN-3871-4
USN-3871-5
USN-3880-1
USN-3880-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu