PT-2018-3511 · Linux+4 · Linux Kernel+4
Andy Lutomirski
·
Published
2018-05-01
·
Updated
2020-09-04
·
CVE-2018-1000199
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel version 3.18
Description:
The issue is related to a dangerous feature vulnerability in the
modify user hw breakpoint() function, which can lead to a crash and possibly memory corruption. This can be exploited via local code execution and the ability to use ptrace. The vulnerability is associated with incorrect error handling.Recommendations:
For Linux Kernel version 3.18, consider applying the fix from git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f to resolve the issue. As a temporary workaround, consider restricting the use of
ptrace to minimize the risk of exploitation.Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse
Ubuntu