PT-2018-6737 · Linux+5 · Linux Kernel+5

Publicado

2017-12-08

·

Atualizado

2019-10-03

·

CVE-2017-18208

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.4
Description: The issue allows local users to cause a denial of service, resulting in an infinite loop. This is achieved by triggering the use of MADVISE WILLNEED for a DAX mapping through the madvise willneed function in mm/madvise.c.
Recommendations: For Linux kernel versions prior to 4.14.4, update to version 4.14.4 or later to resolve the issue.

Correção

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALT-PU-2017-2771
ALT-PU-2018-1991
CESA-2018_3083
CVE-2017-18208
OPENSUSE-SU-2018_0781-1
RHSA-2018:2948
RHSA-2018:3083
RHSA-2018:3096
RHSA-2018_3083
RHSA-2018_3096
RHSA-2019:3967
RHSA-2019:4057
RHSA-2019:4058
SUSE-SU-2018:0785-1
SUSE-SU-2018:0786-1
SUSE-SU-2018:0834-1
SUSE-SU-2018:0848-1
SUSE-SU-2018:0986-1
SUSE-SU-2018:1080-1
SUSE-SU-2018:1172-1
SUSE-SU-2018:1309-1
USN-3619-1
USN-3619-2
USN-3653-1
USN-3653-2
USN-3655-1
USN-3655-2
USN-3657-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu