Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2018-8337

Опубликовано: 11 сент. 2018
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

Windows Subsystem for Linux Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity. An attacker who successfully exploited this vulnerability could replace or delete arbitrary files as a low privilege user.

A attacker could exploit this vulnerability by running a specially crafted application.

The update addresses the vulnerability by correcting how Windows Subsystem for Linux handles case sensitivity.

Обновления

ПродуктСтатьяОбновление
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows Server, version 1709 (Server Core Installation)

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

N/A

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 52%
0.0029
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
почти 7 лет назад

A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.

CVSS3: 5.3
github
около 3 лет назад

A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.

CVSS3: 5.3
fstec
почти 7 лет назад

Уязвимость подсистемы совместимости для запуска Linux-приложений операционных систем Windows, позволяющая нарушителю заменить или удалить произвольные файлы

EPSS

Процентиль: 52%
0.0029
Низкий

5.3 Medium

CVSS3