PT-2018-3511 · Linux+4 · Linux Kernel+4
Andy Lutomirski
·
Publicado
2018-05-01
·
Atualizado
2020-09-04
·
CVE-2018-1000199
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel version 3.18
Description:
The issue is related to a dangerous feature vulnerability in the
modify user hw breakpoint() function, which can lead to a crash and possibly memory corruption. This can be exploited via local code execution and the ability to use ptrace. The vulnerability is associated with incorrect error handling.Recommendations:
For Linux Kernel version 3.18, consider applying the fix from git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f to resolve the issue. As a temporary workaround, consider restricting the use of
ptrace to minimize the risk of exploitation.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Linux Kernel
Red Hat
Suse
Ubuntu