PT-2018-3516 · Linux+2 · Linux Kernel+2

Wen Xu

·

Publicado

2018-07-26

·

Atualizado

2019-09-02

·

CVE-2018-14616

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.11
Description: The issue is related to a NULL pointer dereference in the fscrypt do page crypto() function in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image. This can potentially allow an attacker to cause a denial of service.
Recommendations: For Linux kernel versions prior to 4.17.11, update to version 4.17.11 or later to resolve the issue. As a temporary workaround, consider avoiding the use of corrupted f2fs images to minimize the risk of exploitation.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-2092
ALT-PU-2018-2094
ALT-PU-2019-1433
BDU:2020-03257
CVE-2018-14616
DLA-1715-1
USN-3932-1
USN-3932-2
USN-4094-1
USN-4118-1

Produtos afetados

Alt Linux
Linux Kernel
Ubuntu