Published: 02/04/2018 Updated: 29/08/2018

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel up to and including 4.15.15 allows malicious users to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-5715 Multiple researchers have discovered a vulnerability in various processors supporting speculative execution, enabling an attacker controlling an unprivileged process to read mem ...

Several security issues were fixed in the Linux kernel ...

The Linux kernel is vulnerable to an out-of-bounds read in ext4/ballocc:ext4_valid_block_bitmap() function An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted ext4 image to cause a crash ...

CWE-125 https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=7dac4a1726a9c64a517d595c40e95e2d0d135f6f https://bugzilla.redhat.com/show_bug.cgi?id=1560782 https://bugzilla.kernel.org/show_bug.cgi?id=199181 http://openwall.com/lists/oss-security/2018/03/29/1 https://www.debian.org/security/2018/dsa-4188 https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html https://usn.ubuntu.com/3676-2/https://usn.ubuntu.com/3676-1/https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://usn.ubuntu.com/3754-1/https://usn.ubuntu.com/3752-2/https://usn.ubuntu.com/3752-1/https://usn.ubuntu.com/3752-3/https://nvd.nist.gov https://www.debian.org/security/./dsa-4188 https://usn.ubuntu.com/3676-1/

CVE-2018-1093

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect