CVE-2018-11506

🗓️ 28 May 2018 04:00:29Reported by mitreType

The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call

Reporter	Title	Published	Views	Family All 128
Prion	Stack overflow	28 May 201804:29	–	prion
Cvelist	CVE-2018-11506	28 May 201804:00	–	cvelist
NVD	CVE-2018-11506	28 May 201804:29	–	nvd
Debian CVE	CVE-2018-11506	28 May 201804:29	–	debiancve
RedhatCVE	CVE-2018-11506	31 Dec 201921:28	–	redhatcve
UbuntuCve	CVE-2018-11506	28 May 201800:00	–	ubuntucve
Tenable Nessus	Fedora 27 : kernel (2018-e8f793bbfc)	6 Jun 201800:00	–	nessus
Tenable Nessus	Fedora 28 : kernel (2018-93af520878)	3 Jan 201900:00	–	nessus
Tenable Nessus	Debian DLA-1422-2 : linux security update (Spectre)	16 Jul 201800:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3752-2)	24 Aug 201800:00	–	nessus

Nvd

Node

linux linux_kernelRange4.11–4.14.45

linux linux_kernelRange4.15–4.16.13

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

Node

debian debian_linuxMatch8.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00016.html
usn	www.usn.ubuntu.com/3752-3/
github	www.github.com/torvalds/linux/commit/f7068114d45ec55996b9040e98111afa56e010fe
usn	www.usn.ubuntu.com/3752-1/
usn	www.usn.ubuntu.com/3752-2/
twitter	www.twitter.com/efrmv/status/1001574894273007616
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00020.html
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00015.html
git	www.git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
access	www.access.redhat.com/errata/RHSA-2018:2948

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 May 2018 04:29Current

7.9High risk

Vulners AI Score7.9

CVSS27.2

CVSS37.8

EPSS0.00042

CWE-787