Lucene search

Veracode Vulnerability DatabaseVERACODE:19518

HistoryMay 16, 2019 - 3:18 a.m.

Denial Of Service (DoS)

2019-05-1603:18:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

JSON

Linux kernel is vulnerable to NULL pointer dereference vulnerability. This is because the ext4/mballoc.c:ext4_process_freed_data() function in Linux kernel mishandles the case of a root directory with a zero i_links_count. A privileged attacker could cause a denial of service condition with a crafted ext4 image which may result in an application crash.

CPENameOperatorVersion
kerneleq3.10.0__862.el7
kerneleq3.10.0__693.el7
kerneleq3.10.0__693.5.2.p7ih.el7
kerneleq3.10.0__514.16.1.el7
kerneleq3.10.0__862.2.3.el7
kerneleq3.10.0__693.21.1.el7
kerneleq3.10.0__693.11.6.el7
kerneleq3.10.0__862.11.6.el7
kerneleq3.10.0__514.26.2.el7
kerneleq3.10.0__862.3.2.el7

Name	Operator	Version
kernel	eq	3.10.0__862.el7
kernel	eq	3.10.0__693.el7
kernel	eq	3.10.0__693.5.2.p7ih.el7
kernel	eq	3.10.0__514.16.1.el7
kernel	eq	3.10.0__862.2.3.el7
kernel	eq	3.10.0__693.21.1.el7
kernel	eq	3.10.0__693.11.6.el7
kernel	eq	3.10.0__862.11.6.el7
kernel	eq	3.10.0__514.26.2.el7
kernel	eq	3.10.0__862.3.2.el7

Rows per page:

1-10 of 541

References

openwall.com/lists/oss-security/2018/03/29/1

access.redhat.com/articles/3553061

access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index

access.redhat.com/errata/RHSA-2018:2948

access.redhat.com/errata/RHSA-2018:3083

access.redhat.com/errata/RHSA-2018:3096

access.redhat.com/security/cve/CVE-2017-18360

access.redhat.com/security/cve/CVE-2018-1092

access.redhat.com/security/cve/CVE-2018-18690

access.redhat.com/security/updates/classification/#important

bugzilla.kernel.org/show_bug.cgi?id=199179

bugzilla.kernel.org/show_bug.cgi?id=199275

bugzilla.redhat.com/show_bug.cgi?id=1322930

bugzilla.redhat.com/show_bug.cgi?id=1488484

bugzilla.redhat.com/show_bug.cgi?id=1504058

bugzilla.redhat.com/show_bug.cgi?id=1507027

bugzilla.redhat.com/show_bug.cgi?id=1542494

bugzilla.redhat.com/show_bug.cgi?id=1557434

bugzilla.redhat.com/show_bug.cgi?id=1557599

bugzilla.redhat.com/show_bug.cgi?id=1558328

bugzilla.redhat.com/show_bug.cgi?id=1560777

bugzilla.redhat.com/show_bug.cgi?id=1561162

bugzilla.redhat.com/show_bug.cgi?id=1563697

bugzilla.redhat.com/show_bug.cgi?id=1564186

bugzilla.redhat.com/show_bug.cgi?id=1568167

bugzilla.redhat.com/show_bug.cgi?id=1572983

bugzilla.redhat.com/show_bug.cgi?id=1584775

bugzilla.redhat.com/show_bug.cgi?id=1592654

bugzilla.redhat.com/show_bug.cgi?id=1609717

git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44

lists.debian.org/debian-lts-announce/2018/05/msg00000.html

usn.ubuntu.com/3676-1/

usn.ubuntu.com/3676-2/

usn.ubuntu.com/3677-1/

usn.ubuntu.com/3677-2/

usn.ubuntu.com/3678-1/

usn.ubuntu.com/3678-2/

usn.ubuntu.com/3678-3/

usn.ubuntu.com/3678-4/

usn.ubuntu.com/3754-1/

www.debian.org/security/2018/dsa-4187

www.debian.org/security/2018/dsa-4188

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

JSON

Related for VERACODE:19518