PT-2018-10156 · Linux +5 · Linux Kernel +5

🗓️ 12 Jul 2018 00:00:00Reported by Positive TechnologiesType

Local user can trigger out-of-bounds in ext4 get group info, causing denial of service on mounting.

Reporter	Title	Published	Views	Family All 10786
OSV	RHSA-2018:1676 Red Hat Security Advisory: org.ovirt.engine-root security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1686 Red Hat Security Advisory: qemu-kvm-rhev security update	29 Sep 202417:17	–	osv
OSV	RHSA-2018:1688 Red Hat Security Advisory: org.ovirt.engine-root security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1689 Red Hat Security Advisory: rhevm-setup-plugins security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1690 Red Hat Security Advisory: vdsm security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1696 Red Hat Security Advisory: redhat-virtualization-host security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1710 Red Hat Security Advisory: redhat-virtualization-host security update	29 Sep 202417:18	–	osv
OSV	RHSA-2018:1711 Red Hat Security Advisory: rhev-hypervisor7 security update	29 Sep 202417:17	–	osv
OSV	RHSA-2018:1737 Red Hat Security Advisory: kernel security and bug fix update	29 Sep 202417:17	–	osv
OSV	RHSA-2018:1738 Red Hat Security Advisory: kernel security, bug fix, and enhancement update	29 Sep 202417:18	–	osv

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md
github	www.github.com/butterflyhack/CVE-2019-10207
github	www.github.com/luan0ap/cve-2018-14634
github	www.github.com/GeneBlue/CVE-2017-10661_POC
github	www.github.com/mmxsrup/CVE-2018-3639
github	www.github.com/mmxsrup/CVE-2019-5489
github	www.github.com/EdwardOwusuAdjei/Spectre-PoC
bugzilla	www.bugzilla.kernel.org/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

12 Feb 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 24.9 - 7.8

CVSS 37.8 - 8.4

CVSS 3.19.8

EPSS0.92621

SSVC