PT-2018-3518

CVE-2018-14613

·

تاريخ النشر

2018-07-26

·

تاريخ التحديث

2021-06-14

الوصف من

CVSS 2.0
7.1
عالية
المقاييسAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10
Description: The issue is related to an invalid pointer dereference in the io ctl map page() function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation in check leaf item in fs/btrfs/tree-checker.c. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations: For Linux kernel versions prior to 4.17.10, update to a version 4.17.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted btrfs images to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2018-2092
ALT-PU-2018-2094
ALT-PU-2019-1433
DLA-1715-1
DLA-2241-1
DLA-2241-2
OPENSUSE-SU-2018_3071-1
OPENSUSE-SU-2018_3202-1
SUSE-SU-2018:2980-1
SUSE-SU-2018:2981-1
SUSE-SU-2018:3003-1
SUSE-SU-2018:3004-1
SUSE-SU-2018:3659-1
SUSE-SU-2018:3961-1
SUSE-SU-2019:0095-1
USN-3932-1
USN-3932-2
USN-4094-1
USN-4118-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾