PT-2018-1240 · Linux +2 · Linux Kernel +2

🗓️ 29 Mar 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 35 Views

The ext4 xattr check entries mishandles xattr sizes in Linux up to 4.15.15, causing denial of service.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	11 Aug 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a kernel vulnerability (CVE-2018-5391)	20 Feb 201916:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect V5 is vulnerable to denial of service (CVE-2019-11479)	9 Nov 202020:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by TCP denial of service vulnarabilities	5 Nov 201922:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by Denial of Service vulnerabilities	8 Jun 202121:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Kernel affect Power Hardware Management Console	22 Sep 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/butterflyhack/CVE-2019-10207
github	www.github.com/luan0ap/cve-2018-14634
github	www.github.com/mmxsrup/CVE-2019-5489
bugzilla	www.bugzilla.kernel.org/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-03257
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

13 Feb 2023 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.1 - 10

CVSS 37.8

CVSS 3.17.8 - 9.8

EPSS0.9166

SSVC