PT-2018-2581 · Linux+5 · Linux Kernel+5

Wen Xu

·

Publicado

2018-06-13

·

Atualizado

2023-10-05

·

CVE-2018-10878

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the ext4 init block bitmap() function in the Linux kernel's ext4 filesystem, which is vulnerable to an out-of-bounds write. This can be exploited by a local user who mounts and operates a specially crafted ext4 filesystem image, potentially leading to a denial of service or other unspecified impacts.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2018-2003
ALT-PU-2018-2032
ALT-PU-2019-1433
BDU:2019-01056
CESA-2018_3083
CVE-2018-10878
DLA-1423-1
DLA-1529-1
OPENSUSE-SU-2018_2404-1
OPENSUSE-SU-2018_2407-1
RHSA-2018:2948
RHSA-2018:3083
RHSA-2018:3096
RHSA-2018_3083
RHSA-2018_3096
SUSE-SU-2018:2380-1
SUSE-SU-2018:2381-1
SUSE-SU-2018:2450-1
SUSE-SU-2018:2596-1
SUSE-SU-2018:2775-1
SUSE-SU-2018:2776-1
SUSE-SU-2018:2858-1
SUSE-SU-2018:2908-1
SUSE-SU-2018:2908-2
SUSE-SU-2018:3083-1
SUSE-SU-2018:3084-1
USN-3753-1
USN-3753-2
USN-3871-1
USN-3871-2
USN-3871-3
USN-3871-4
USN-3871-5

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu