CVE-2018-10883

Опубликовано: 30 июл. 2018

Источник: nvd

CVSS3: 4.8

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

Ссылки

https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3096
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10883
Issue Tracking
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8bc1379b82b8e809eef77a9fedbb75c6c297be19
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e09463f220ca9a1a1ecfda84fcda658f99a1f12a
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
Mailing List
Third Party Advisory
https://support.f5.com/csp/article/K94735334?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3871-1/
Third Party Advisory
https://usn.ubuntu.com/3871-3/
Third Party Advisory
https://usn.ubuntu.com/3871-4/
Third Party Advisory
https://usn.ubuntu.com/3871-5/
Third Party Advisory
https://usn.ubuntu.com/3879-1/
Third Party Advisory
https://usn.ubuntu.com/3879-2/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3096
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10883
Issue Tracking
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8bc1379b82b8e809eef77a9fedbb75c6c297be19
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e09463f220ca9a1a1ecfda84fcda658f99a1f12a
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.9.110 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00073

Низкий

4.8 Medium

CVSS3

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-10883

CVSS3: 4.8

ubuntu

около 7 лет назад

CVE-2018-10883

CVSS3: 4.8

redhat

около 7 лет назад

CVE-2018-10883

CVSS3: 4.8

debian

около 7 лет назад

A flaw was found in the Linux kernel's ext4 filesystem. A local user c ...

GHSA-jrh4-2f65-vc34

CVSS3: 5.5

github

около 3 лет назад

BDU:2019-01060

CVSS3: 5.5

fstec

около 7 лет назад

Уязвимость функции jbd2_journal_dirty_metadata() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 23%

0.00073

Низкий

4.8 Medium

CVSS3

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-787