PT-2018-2583 · Linux+3 · Linux Kernel+3
Wen Xu
·
Publicado
2018-06-16
·
Atualizado
2023-02-13
·
CVE-2018-10880
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a stack-out-of-bounds write in the ext4 filesystem code. Specifically, the
ext4 update inline data() function is vulnerable when mounting and writing to a crafted ext4 image. This could allow an attacker to cause a system crash and a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu