PT-2018-2804 · Linux +1 · Linux Kernel +1

🗓️ 21 Aug 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

Linux kernel has a missing address check in show opcodes() callers, allowing dumping kernel memory into the dmesg log.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a kernel vulnerability (CVE-2018-5391)	20 Feb 201916:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Kernel affect Power Hardware Management Console	22 Sep 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem V9000 products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2018-5391	7 Dec 202119:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801q	10 Oct 201821:05	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/butterflyhack/CVE-2019-10207
github	www.github.com/mmxsrup/CVE-2019-5489
bdu	www.bdu.fstec.ru/vul/2019-01056
bdu	www.bdu.fstec.ru/vul/2021-01415
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-03257
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

13 Feb 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17 - 7.8

CVSS 27.8

CVSS 37 - 7.8

EPSS0.7372

SSVC