Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

fstec логотип

BDU:2019-02512

Опубликовано: 26 июл. 2018
Источник: fstec
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

Уязвимость функции hfsplus_lookup () (fs/hfsplus/dir.c) ядра операционной системы Linux связана с разыменованием нулевого указателя, возникающее при открытии файла (который якобы является жесткой ссылкой) в файловой системе hfs + . Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Вендор

Canonical Ltd.
Сообщество свободного программного обеспечения
Novell Inc.

Наименование ПО

Ubuntu
Debian GNU/Linux
OpenSUSE Leap
Suse Linux Enterprise Desktop
SUSE Enterprise Storage
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
SUSE OpenStack Cloud
Suse Linux Enterprise Server
OpenStack Cloud Magnum Orchestration
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Build System Kit
SUSE CaaS Platform
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Real Time Extension
Linux

Версия ПО

14.04 (Ubuntu)
9 (Debian GNU/Linux)
42.3 (OpenSUSE Leap)
16.04 (Ubuntu)
12 SP3 (Suse Linux Enterprise Desktop)
12 SP4 (Suse Linux Enterprise Desktop)
4 (SUSE Enterprise Storage)
12 SP2 (SUSE Linux Enterprise Server for SAP Applications)
12 SP2-BCL (SUSE Linux Enterprise Server for SAP Applications)
12 SP2-ESPOS (SUSE Linux Enterprise Server for SAP Applications)
12 SP2-LTSS (SUSE Linux Enterprise Server for SAP Applications)
12 SP3 (SUSE Linux Enterprise Server for SAP Applications)
12 SP3 (SUSE Linux Enterprise Software Development Kit)
12 SP4 (SUSE Linux Enterprise Software Development Kit)
12 SP3 (SUSE Linux Enterprise Workstation Extension)
12 SP4 (SUSE Linux Enterprise Workstation Extension)
7 (SUSE OpenStack Cloud)
12 SP3 (Suse Linux Enterprise Server)
12 SP4 (Suse Linux Enterprise Server)
7.0 (OpenStack Cloud Magnum Orchestration)
11 SP3 LTSS (Suse Linux Enterprise Server)
11 SP4 (Suse Linux Enterprise Server)
12 SP1 LTSS (Suse Linux Enterprise Server)
12 SP2 LTSS (Suse Linux Enterprise Server)
11 SP4 (SUSE Linux Enterprise Software Development Kit)
15 (SUSE Linux Enterprise Module for Basesystem)
15 SP1 (SUSE Linux Enterprise Module for Basesystem)
15.0 (OpenSUSE Leap)
15 (SUSE Linux Enterprise Module for Development Tools)
15 SP1 (SUSE Linux Enterprise Module for Development Tools)
12 SP2-CLIENT (SUSE Linux Enterprise Point of Sale)
12 SP3 (SUSE Linux Enterprise Build System Kit)
12 SP2-BCL (Suse Linux Enterprise Server)
12 SP2-ESPOS (Suse Linux Enterprise Server)
- (SUSE CaaS Platform)
12 SP2 (SUSE Linux Enterprise High Availability)
12 SP3 (SUSE Linux Enterprise High Availability)
12 SP4 (SUSE Linux Enterprise High Availability)
15 (SUSE Linux Enterprise High Availability)
15 SP1 (SUSE Linux Enterprise High Availability)
12 SP3 (SUSE Linux Enterprise Live Patching)
15 SP1 (SUSE Linux Enterprise Module for Legacy Software)
15 (SUSE Linux Enterprise Module for Legacy Software)
15 (SUSE Linux Enterprise Module for Live Patching)
12 (SUSE Linux Enterprise Module for Public Cloud)
15 (SUSE Linux Enterprise Module for Public Cloud)
11 SP3 (SUSE Linux Enterprise Point of Sale)
11 SP4 (SUSE Linux Enterprise Real Time Extension)
12 SP3 (SUSE Linux Enterprise Real Time Extension)
12-LTSS (Suse Linux Enterprise Server)
11 SP3-LTSS (SUSE Linux Enterprise Server for SAP Applications)
11 SP4 (SUSE Linux Enterprise Server for SAP Applications)
12 SP1 (SUSE Linux Enterprise Server for SAP Applications)
12 SP1-LTSS (SUSE Linux Enterprise Server for SAP Applications)
12-LTSS (SUSE Linux Enterprise Server for SAP Applications)
15 (SUSE Linux Enterprise Workstation Extension)
15 SP1 (SUSE Linux Enterprise Workstation Extension)
8 (Debian GNU/Linux)
от 4.5 до 4.9.126 включительно (Linux)
от 4.10 до 4.14.69 включительно (Linux)
от 4.15 до 4.18.7 включительно (Linux)
от 2.6.12 до 4.4.155 включительно (Linux)

Тип ПО

Операционная система
Прикладное ПО информационных систем

Операционные системы и аппаратные платформы

-

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,1)
Средний уровень опасности (базовая оценка CVSS 3.0 составляет 5,5)
Нет опасности уровень опасности (базовая оценка CVSS 4.0 составляет 0)

Возможные меры по устранению уязвимости

Для операционной системы Linux:
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.70
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.8
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.156
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.127
Использование рекомендаций для программных продуктов SuSE:
https://www.suse.com/security/cve/CVE-2018-14617/

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 49%
0.00258
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 7 лет назад

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.

CVSS3: 5.5
redhat
больше 7 лет назад

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.

CVSS3: 5.5
nvd
больше 7 лет назад

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.

CVSS3: 5.5
debian
больше 7 лет назад

An issue was discovered in the Linux kernel through 4.17.10. There is ...

CVSS3: 5.5
github
больше 3 лет назад

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.

EPSS

Процентиль: 49%
0.00258
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2