PT-2018-6793 · Linux+4 · Linux Kernel+4

Published 2017-10-05 · Updated 2020-08-14 · CVE-2017-18270

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.5

Description: A local user could create keyrings for other users via keyctl commands, potentially setting unwanted defaults or causing a denial of service.

Recommendations: For Linux kernel versions prior to 4.13.5, update to version 4.13.5 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2017-2378

ALT-PU-2018-1991

CESA-2018_1062

CVE-2017-18270

RHSA-2018:0412

RHSA-2018:1062

RHSA-2018_0412

RHSA-2018_1062

USN-3754-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 71

• https://github.com/torvalds/linux/commit/237bbd29f7a049d310d907f4b2716a7feef9abf3 · Patch
• https://ubuntu.com/security/CVE-2017-16526 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10021 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13405 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10124 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2583 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18270 · Vendor Advisory