CVE-2018-11508

Опубликовано: 28 мая 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

Ссылки

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a0b98734479aa5b3c671d5190e86273372cab95
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104292
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1574
Exploit
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/0a0b98734479aa5b3c671d5190e86273372cab95
Patch
Third Party Advisory
https://usn.ubuntu.com/3695-1/
Third Party Advisory
https://usn.ubuntu.com/3695-2/
Third Party Advisory
https://usn.ubuntu.com/3697-1/
Third Party Advisory
https://usn.ubuntu.com/3697-2/
Third Party Advisory
https://www.exploit-db.com/exploits/46208/
Exploit
Third Party Advisory
VDB Entry
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.9
Release Notes
Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a0b98734479aa5b3c671d5190e86273372cab95
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104292
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1574
Exploit
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/0a0b98734479aa5b3c671d5190e86273372cab95
Patch
Third Party Advisory
https://usn.ubuntu.com/3695-1/
Third Party Advisory
https://usn.ubuntu.com/3695-2/
Third Party Advisory
https://usn.ubuntu.com/3697-1/
Third Party Advisory
https://usn.ubuntu.com/3697-2/
Third Party Advisory
https://www.exploit-db.com/exploits/46208/
Exploit
Third Party Advisory
VDB Entry
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.9
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.16.9 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 77%

0.01653

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-11508

CVSS3: 5.5

ubuntu

больше 8 лет назад

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

CVE-2018-11508

CVSS3: 3.3

redhat

больше 8 лет назад

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

CVE-2018-11508

CVSS3: 5.5

debian

больше 8 лет назад

The compat_get_timex function in kernel/compat.c in the Linux kernel b ...

GHSA-j435-p44w-r9xj

CVSS3: 5.5

github

больше 4 лет назад

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

ALT-PU-2018-1728

CVSS3: 5.5

altlinux

больше 8 лет назад

ALT-PU-2018-1728: package `kernel-image-un-def` update to version 4.16.9-alt1

EPSS

Процентиль: 77%

0.01653

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200