PT-2018-6793 · Linux+4 · Linux Kernel+4

Publicado 2017-10-05 · Atualizado 2020-08-14 · CVE-2017-18270

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.5

Description: A local user could create keyrings for other users via keyctl commands, potentially setting unwanted defaults or causing a denial of service.

Recommendations: For Linux kernel versions prior to 4.13.5, update to version 4.13.5 or later to resolve the issue.

Correção

Identificadores relacionados

ALT-PU-2017-2378

ALT-PU-2018-1991

CESA-2018_1062

CVE-2017-18270

RHSA-2018:0412

RHSA-2018:1062

RHSA-2018_0412

RHSA-2018_1062

USN-3754-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

Referências · 71

• https://github.com/torvalds/linux/commit/237bbd29f7a049d310d907f4b2716a7feef9abf3 · Correção
• https://ubuntu.com/security/CVE-2017-16526 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1093 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1092 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-18270 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13094 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10021 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13405 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10124 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2583 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-15649 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-16538 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2671 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-16536 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18270 · Aviso do Fabricante