PT-2018-3518 · Linux+3 · Linux Kernel+3

Markus Loewe

·

Publicado

2018-07-26

·

Atualizado

2021-06-14

·

CVE-2018-14613

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10
Description: The issue is related to an invalid pointer dereference in the io ctl map page() function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation in check leaf item in fs/btrfs/tree-checker.c. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations: For Linux kernel versions prior to 4.17.10, update to a version 4.17.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted btrfs images to minimize the risk of exploitation.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-2092
ALT-PU-2018-2094
ALT-PU-2019-1433
BDU:2020-03259
CVE-2018-14613
DLA-1715-1
DLA-2241-1
DLA-2241-2
OPENSUSE-SU-2018_3071-1
OPENSUSE-SU-2018_3202-1
SUSE-SU-2018:2980-1
SUSE-SU-2018:2981-1
SUSE-SU-2018:3003-1
SUSE-SU-2018:3004-1
SUSE-SU-2018:3659-1
SUSE-SU-2018:3961-1
SUSE-SU-2019:0095-1
USN-3932-1
USN-3932-2
USN-4094-1
USN-4118-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu