CVE Vulnerability

CVE-2018-18690

In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.

4.9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

Scope

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c Patch Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1105025 Issue Tracking Third Party Advisory
https://bugzilla.kernel.org/show_bug.cgi?id=199119 Exploit Issue Tracking
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c Patch Vendor Advisory
http://www.securityfocus.com/bid/105753 VDB Entry Third Party Advisory
https://usn.ubuntu.com/3849-2/ Third Party Advisory
https://usn.ubuntu.com/3848-2/ Third Party Advisory
https://usn.ubuntu.com/3848-1/ Third Party Advisory
https://usn.ubuntu.com/3847-3/ Third Party Advisory
https://usn.ubuntu.com/3847-2/ Third Party Advisory
https://usn.ubuntu.com/3847-1/ Third Party Advisory
https://usn.ubuntu.com/3849-1/ Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Information

Published : 2018-10-26 06:29

Updated : 2019-10-03 12:03

NVD link : CVE-2018-18690

Mitre link : CVE-2018-18690

Products Affected
No products.
CWE
CWE-754