Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1091

Опубликовано: 27 мар. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 4.9
EPSS Низкий

Описание

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 4.13.4 (включая)

EPSS

Процентиль: 16%
0.00051
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-391
CWE-119

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 7 лет назад

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

CVSS3: 4.7
redhat
почти 8 лет назад

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

CVSS3: 5.5
debian
около 7 лет назад

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c ...

CVSS3: 5.5
github
около 3 лет назад

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

suse-cvrf
около 7 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 16%
0.00051
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-391
CWE-119