CVE-2018-14656

Опубликовано: 08 окт. 2018

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 2.1

CVSS3: 7

Описание

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-8.9
devel	not-affected	4.18.0-8.9
esm-infra-legacy/trusty	not-affected
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	not-affected
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-1002.3
devel	not-affected	4.18.0-1002.3
esm-infra-legacy/trusty	not-affected
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-1003.3
devel	not-affected	4.18.0-1003.3
esm-infra-legacy/trusty	not-affected
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	4.18.0-1003.3~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	4.18.0-1003.3~18.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-1002.3
devel	not-affected	4.18.0-1002.3
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	4.18.0-8.9~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	4.18.0-8.9~18.04.1
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-1002.2
devel	not-affected	4.18.0-1002.2
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	not-affected
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected
precise/esm	DNE
trusty	not-affected
trusty/esm	not-affected
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.19~rc2
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected
devel	not-affected
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	not-affected	4.18.0-1004.6
devel	not-affected	4.18.0-1004.6
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	not-affected

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.19~rc2
xenial	not-affected

Показывать по

Ссылки на источники

EPSS

Процентиль: 26%

0.0009

Низкий

2.1 Low

CVSS2

7 High

CVSS3

Связанные уязвимости

CVE-2018-14656

CVSS3: 4.7

redhat

больше 7 лет назад

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

CVE-2018-14656

CVSS3: 7

nvd

больше 7 лет назад

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

CVE-2018-14656

CVSS3: 7

debian

больше 7 лет назад

A missing address check in the callers of the show_opcodes() in the Li ...

GHSA-cgpj-vcc9-76qx

CVSS3: 5.5

github

больше 3 лет назад

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

BDU:2019-02163

CVSS3: 4.7

fstec

больше 7 лет назад

Уязвимость функции show_opcodes ядра операционной системы Linux, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 26%

0.0009

Низкий

2.1 Low

CVSS2

7 High

CVSS3

CVE-2018-14656

Описание

Пакет linux

Пакет linux-aws

Пакет linux-azure

Пакет linux-azure-edge

Пакет linux-euclid

Пакет linux-flo

Пакет linux-gcp

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-oem

Пакет linux-raspi2

Пакет linux-snapdragon

Ссылки на источники

Связанные уязвимости