Published: 22/09/2018 Updated: 06/08/2019

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing malicious users to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freedesktop udisks 2.8.0
canonical ubuntu linux 18.04

Synopsis Moderate: udisks2 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for udisks2 is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Debian Bug report logs - #909607 CVE-2018-17336 Package: udisks2; Maintainer for udisks2 is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Source for udisks2 is src:udisks2 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 25 Sep 2018 20:39:02 UTC Severity: ...

Udisks could be made to crash or expose sensitive information ...

UDisks 280 has a format string vulnerability in udisks_log in udisksloggingc, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings(CVE-2018-17336) An uncontrolled forma ...

An uncontrolled format string vulnerability has been discovered in udisks when it mounts a filesystem with a malformed label A local attacker may use this flaw to leak memory, make the udisks service crash, or cause other unspecified effects ...

No Cap

AonSploit No Cap Hầu hết các CVE này cũng được công nhận bởi oxagast Đây là một fuzzer, được viết bằng BASH SHELL, được thiết kế để tìm lỗi trong các chương trình BASH SHELL Đây là một công cụ để xây dựng danh sách từ dựa trên những

CWE-134 https://github.com/storaged-project/udisks/issues/578 https://usn.ubuntu.com/3772-1/https://access.redhat.com/errata/RHSA-2019:2178 https://access.redhat.com/errata/RHSA-2019:2178 https://usn.ubuntu.com/3772-1/https://nvd.nist.gov

CVE-2018-17336

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect