Lucene search

K
ubuntucveUbuntu.comUB:CVE-2018-1000532
HistoryJun 26, 2018 - 12:00 a.m.

CVE-2018-1000532

2018-06-2600:00:00
ubuntu.com
ubuntu.com
8

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.9%

beep version 1.3 and up contains a External Control of File Name or Path
vulnerability in --device option that can result in Local unprivileged user
can inhibit execution of arbitrary programs by other users, allowing DoS.
This attack appear to be exploitable via The system must allow local users
to run beep.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchbeep< anyUNKNOWN
ubuntu16.04noarchbeep< anyUNKNOWN

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.9%