PT-2018-3631 · Linux+3 · Linux Kernel+3

Published 2018-10-03 · Updated 2024-06-15 · CVE-2018-18710

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the cdrom ioctl select disc function in the Linux kernel, specifically in the drivers/cdrom/cdrom.c file. It is associated with information disclosure. Exploitation of this issue could allow an attacker to access confidential data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-2631

ALT-PU-2018-2699

ALT-PU-2019-1433

BDU:2021-01437

CVE-2018-18710

DLA-1715-1

DLA-1731-1

DLA-1731-2

OPENSUSE-SU-2018_3658-1

OPENSUSE-SU-2018_3817-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

SUSE-SU-2018:3688-1

SUSE-SU-2018:3689-1

SUSE-SU-2018:3746-1

SUSE-SU-2018:3773-1

SUSE-SU-2018:3869-1

SUSE-SU-2018:3934-1

SUSE-SU-2018:3961-1

SUSE-SU-2018:4069-1

SUSE-SU-2018:4072-1

SUSE-SU-2019:0095-1

SUSE-SU-2019:0224-1

SUSE-SU-2019:0439-1

SUSE-SU-2019:1289-1

SUSE-SU-2019:13937-1

USN-3846-1

USN-3847-1

USN-3847-2

USN-3847-3

USN-3848-1

USN-3848-2

USN-3849-1

USN-3849-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 1044

• https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276 · Patch
• https://cve.org/CVERecord?id=CVE-2018-18710 · Security Note
• https://ubuntu.com/security/notices/USN-3846-1 · Vendor Advisory
• https://usn.ubuntu.com/3848-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18174 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:3934-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3849-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3847-3 · Vendor Advisory
• https://usn.ubuntu.com/3848-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18710 · Vendor Advisory
• https://usn.ubuntu.com/3849-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:3746-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3849-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3848-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-4316.html · Vendor Advisory