PT-2018-3511
CVE-2018-1000199
·
Publicado
2018-05-01
·
Atualizado
2020-09-04
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux Kernel version 3.18
Description:
The issue is related to a dangerous feature vulnerability in the
modify user hw breakpoint() function, which can lead to a crash and possibly memory corruption. This can be exploited via local code execution and the ability to use ptrace. The vulnerability is associated with incorrect error handling.Recommendations:
For Linux Kernel version 3.18, consider applying the fix from git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f to resolve the issue. As a temporary workaround, consider restricting the use of
ptrace to minimize the risk of exploitation.Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾