PT-2018-14440 · Xfce+3 · Xfce+4

0Xd0Ff9 · Published 2018-04-06 · Updated 2018-12-21 · CVE-2018-18398

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xfce Thunar version 1.6.15

Description The issue arises when Xfce Thunar 1.6.15 is used with Xfce 4.12, specifically with the IBus-Unikey input method for file searches within the File Manager. This mishandling leads to an out-of-bounds read and results in a segmentation fault (SEGV). An arbitrary local user could potentially exploit this by creating files in the /tmp directory before the victim uses the IBus-Unikey input method.

Recommendations For Xfce Thunar version 1.6.15, consider disabling the IBus-Unikey input method for file searches within the File Manager as a temporary workaround until a patch is available. Restrict access to the /tmp directory to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-1558

CVE-2018-18398

Affected Products

Alt Linux

Debian

Ibus-Unikey

Xfce

Xfce Thunar

References · 13

• 🔥 https://0xd0ff9.wordpress.com/2018/10/18/cve-2018-18398 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2018-18398 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/thunar · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-18398 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-18398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18398 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-1558 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18398 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18398 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18398 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-18398 · Security Note
• https://packages.debian.org/src:thunar · Note
• https://packages.altlinux.org/ru/vuln/CVE-2018-18398 · Note