Published: 09/05/2018 Updated: 31/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel prior to 4.16.6 allows local malicious users to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 7.0

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Sco ...

Synopsis Important: kernel-alt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several security issues were fixed in the Linux kernel ...

A regression that caused boot failures was fixed in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

A regression that caused boot failures was fixed in the Linux kernel ...

A flaw was found in the Linux kernel, before 4166 where the cdrom_ioctl_media_changed function in drivers/cdrom/cdromc allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory ...

CWE-119 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6 https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 http://www.securityfocus.com/bid/104154 https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html https://usn.ubuntu.com/3676-2/https://usn.ubuntu.com/3676-1/https://usn.ubuntu.com/3695-2/https://usn.ubuntu.com/3695-1/https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html https://usn.ubuntu.com/3754-1/https://access.redhat.com/errata/RHSA-2018:3096 https://access.redhat.com/errata/RHSA-2018:3083 https://access.redhat.com/errata/RHSA-2018:2948 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2018:3083 https://usn.ubuntu.com/3676-1/

CVE-2018-10940

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect