Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-1095

Опубликовано: 02 апр. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 7.1
CVSS3: 5.5

Описание

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

РелизСтатусПримечание
artful

ignored

end of life
bionic

released

4.15.0-24.26
cosmic

not-affected

4.15.0-29.31
devel

not-affected

4.15.0-29.31
esm-infra-legacy/trusty

not-affected

esm-infra/bionic

released

4.15.0-24.26
esm-infra/xenial

not-affected

precise/esm

ignored

end of life, was needs-triage
trusty

not-affected

trusty/esm

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

4.15.0-1011.11
cosmic

not-affected

4.15.0-1011.11
devel

not-affected

4.15.0-1011.11
esm-infra-legacy/trusty

not-affected

esm-infra/bionic

released

4.15.0-1011.11
esm-infra/xenial

not-affected

precise/esm

DNE

trusty

not-affected

trusty/esm

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

4.15.0-1014.14
cosmic

not-affected

4.15.0-1014.14
devel

not-affected

4.15.0-1014.14
esm-infra-legacy/trusty

not-affected

4.15.0-1023.24~14.04.1
esm-infra/bionic

released

4.15.0-1014.14
esm-infra/xenial

released

4.15.0-1014.14~16.04.1
precise/esm

DNE

trusty

not-affected

4.15.0-1023.24~14.04.1
trusty/esm

not-affected

4.15.0-1023.24~14.04.1

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.18.0-1003.3~18.04.1
cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.18.0-1003.3~18.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1
xenial

released

4.15.0-1014.14

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

4.15.0-1010.10
cosmic

not-affected

4.15.0-1010.10
devel

not-affected

4.15.0-1010.10
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

4.15.0-1010.10
esm-infra/xenial

released

4.15.0-1014.14~16.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1
xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

not-affected

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

esm-infra/xenial

released

4.15.0-24.26~16.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

not-affected

4.18.0-8.9~18.04.1
cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.18.0-8.9~18.04.1
esm-infra/xenial

released

4.15.0-24.26~16.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

4.15.0-1012.12
cosmic

not-affected

4.15.0-1012.12
devel

not-affected

4.15.0-1012.12
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

4.15.0-1012.12
esm-infra/xenial

not-affected

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

not-affected

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of standard support]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of standard support]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of standard support]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

precise/esm

DNE

trusty

not-affected

trusty/esm

not-affected

upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [abandoned]
upstream

released

4.17~rc1
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

4.15.0-1009.12
cosmic

not-affected

4.15.0-1009.12
devel

not-affected

4.15.0-1009.12
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

4.15.0-1009.12
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

released

4.15.0-1013.14
cosmic

not-affected

4.15.0-1021.23
devel

not-affected

4.15.0-1021.23
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1
xenial

not-affected

Показывать по

РелизСтатусПримечание
artful

not-affected

bionic

not-affected

cosmic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

4.17~rc1
xenial

not-affected

Показывать по

7.1 High

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.2
redhat
почти 8 лет назад

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

CVSS3: 5.5
nvd
почти 8 лет назад

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

CVSS3: 5.5
debian
почти 8 лет назад

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux ...

CVSS3: 5.5
github
больше 3 лет назад

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

CVSS3: 5.5
fstec
почти 8 лет назад

Уязвимость функции ext4_xattr_check_entries ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

7.1 High

CVSS2

5.5 Medium

CVSS3