CVE-2018-20449

Опубликовано: 04 апр. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Ссылки

https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190502-0002/
Third Party Advisory
https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html
https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190502-0002/
Third Party Advisory
https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:4.14.90:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00069

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-20449

CVSS3: 5.5

ubuntu

почти 7 лет назад

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

CVE-2018-20449

CVSS3: 1.9

redhat

около 7 лет назад

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

CVE-2018-20449

CVSS3: 5.5

debian

почти 7 лет назад

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the L ...

GHSA-cx2c-r978-5vg7

CVSS3: 5.5

github

больше 3 лет назад

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

EPSS

Процентиль: 21%

0.00069

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200