Linux Distros Unpatched Vulnerability : CVE-2018-12233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two...

PT-2018-11064 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.17.1 Description: A memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This issue can be triggered by an unprivileged user with...