CVE-2018-19854

Опубликовано: 04 дек. 2018

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 1.9

CVSS3: 4.7

Описание

An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option).

Релиз	Статус	Примечание
bionic	released	4.15.0-46.49
cosmic	released	4.18.0-14.15
devel	not-affected	4.19.0-12.13
esm-infra-legacy/trusty	not-affected	3.11.0-12.19
esm-infra-legacy/xenial	not-affected	4.2.0-16.19
esm-infra/bionic	released	4.15.0-46.49
esm-infra/xenial	not-affected	4.2.0-16.19
precise/esm	ignored	end of life, was needs-triage
trusty	not-affected	3.11.0-12.19
trusty/esm	not-affected	3.11.0-12.19

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1033.35
cosmic	released	4.18.0-1008.10
devel	not-affected	4.18.0-1008.10
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra-legacy/xenial	not-affected	4.4.0-1001.10
esm-infra/bionic	released	4.15.0-1033.35
esm-infra/xenial	not-affected	4.4.0-1001.10
precise/esm	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	released	4.15.0-1033.35~16.04.1
esm-infra/xenial	released	4.15.0-1033.35~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1011.11~18.04.1
cosmic	released	4.18.0-1008.8
devel	not-affected	4.18.0-1008.8
esm-infra-legacy/trusty	released	4.15.0-1040.44~14.04.1
esm-infra-legacy/xenial	released	4.15.0-1040.44
esm-infra/bionic	released	4.18.0-1011.11~18.04.1
esm-infra/xenial	released	4.15.0-1040.44
precise/esm	DNE
trusty	released	4.15.0-1040.44~14.04.1
trusty/esm	released	4.15.0-1040.44~14.04.1

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1011.11~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-1011.11~18.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	released	4.15.0-1040.44

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1028.29
cosmic	released	4.18.0-1006.7
devel	not-affected	4.18.0-1006.7
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	released	4.15.0-1028.29~16.04.1
esm-infra/bionic	released	4.15.0-1028.29
esm-infra/xenial	released	4.15.0-1028.29~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1006.7~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-1006.7~18.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-14.15~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	released	4.15.0-46.49~16.04.1
esm-infra/bionic	released	4.18.0-14.15~18.04.1
esm-infra/xenial	released	4.15.0-46.49~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	5.0.0-8.9~18.04.1
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	released	4.15.0-46.49~16.04.1
esm-infra/bionic	not-affected	5.0.0-8.9~18.04.1
esm-infra/xenial	released	4.15.0-46.49~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1030.30
cosmic	released	4.18.0-1007.7
devel	not-affected	4.18.0-1007.7
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	not-affected	4.4.0-1004.9
esm-infra/bionic	released	4.15.0-1030.30
esm-infra/xenial	not-affected	4.4.0-1004.9
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life, was needs-triage
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-13.29~14.04.1
precise/esm	DNE
trusty	not-affected	4.4.0-13.29~14.04.1
trusty/esm	not-affected	4.4.0-13.29~14.04.1
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-apps-legacy/xenial	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	4.20~rc3
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1034.39
cosmic	released	4.15.0-1034.39
devel	not-affected	4.15.0-1034.39
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.15.0-1034.39
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	ignored	end of standard support, was needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1009.11
cosmic	not-affected
devel	not-affected	4.15.0-1009.11
esm-infra-legacy/trusty	DNE
esm-infra-legacy/xenial	released	4.15.0-1009.11~16.04.1
esm-infra/bionic	released	4.15.0-1009.11
esm-infra/xenial	released	4.15.0-1009.11~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1032.34
cosmic	released	4.18.0-1009.11
devel	not-affected	4.18.0-1009.11
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	not-affected	4.2.0-1013.19

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	DNE
devel	not-affected
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	4.20~rc3
xenial	not-affected	4.4.0-1012.12

Показывать по

Ссылки на источники

EPSS

Процентиль: 34%

0.00433

Низкий

1.9 Low

CVSS2

4.7 Medium

CVSS3

Связанные уязвимости

CVE-2018-19854

CVSS3: 3.3

redhat

больше 7 лет назад

CVE-2018-19854

CVSS3: 4.7

nvd

больше 7 лет назад

CVE-2018-19854

CVSS3: 4.7

debian

больше 7 лет назад

An issue was discovered in the Linux kernel before 4.19.3. crypto_repo ...

GHSA-328v-h46x-hhhx

CVSS3: 4.7

github

около 4 лет назад

BDU:2019-01062

CVSS3: 4.7

fstec

больше 7 лет назад

Уязвимость функции crypto_report_one() ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 34%

0.00433

Низкий

1.9 Low

CVSS2

4.7 Medium

CVSS3

CVE-2018-19854

Описание

Пакет linux

Пакет linux-aws

Пакет linux-aws-hwe

Пакет linux-azure

Пакет linux-azure-edge

Пакет linux-euclid

Пакет linux-flo

Пакет linux-gcp

Пакет linux-gcp-edge

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-oem

Пакет linux-oracle

Пакет linux-raspi2

Пакет linux-snapdragon

Ссылки на источники

Связанные уязвимости