CVE-2018-1000199

Опубликовано: 24 мая 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
http://www.securitytracker.com/id/1040806
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1318
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1345
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1347
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1348
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1354
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1355
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1374
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
Third Party Advisory
https://lkml.org/lkml/2018/4/6/813
Mailing List
Patch
Third Party Advisory
https://usn.ubuntu.com/3641-1/
Third Party Advisory
https://usn.ubuntu.com/3641-2/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory
https://www.debian.org/security/2018/dsa-4188
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
http://www.securitytracker.com/id/1040806
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1318
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1345
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1347
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00331

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2018-1000199

CVSS3: 5.5

ubuntu

около 7 лет назад

CVE-2018-1000199

CVSS3: 7.8

redhat

около 7 лет назад

CVE-2018-1000199

CVSS3: 5.5

debian

около 7 лет назад

The Linux Kernel version 3.18 contains a dangerous feature vulnerabili ...

SUSE-SU-2018:1551-1

suse-cvrf

около 7 лет назад

Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP1)

SUSE-SU-2018:1550-1

suse-cvrf

около 7 лет назад

Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP2)

EPSS

Процентиль: 55%

0.00331

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119