Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-18193
HistoryFeb 22, 2018 - 12:00 a.m.

CVE-2017-18193

2018-02-2200:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent
trees, which allows local users to cause a denial of service (BUG) via an
application with multiple threads.

Notes

Author Note
tyhicks The affected user base for this issue is likely small since f2fs is not the default filesystem and it is not widely used in Ubuntu
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchlinux< 4.4.0-127.153UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1022.22UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1060.69UNKNOWN
ubuntu16.04noarchlinux-azure< 4.13.0-1005.7UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.13.0-1002.5UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1026.31UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-127.153~14.04.1UNKNOWN
ubuntu16.04noarchlinux-raspi2< 4.4.0-1090.98UNKNOWN
Rows per page:
1-10 of 121

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%