CVE-2018-1000199

MEDIUM

Description

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

References

http://www.securitytracker.com/id/1040806

https://access.redhat.com/errata/RHSA-2018:1318

https://access.redhat.com/errata/RHSA-2018:1345

https://access.redhat.com/errata/RHSA-2018:1347

https://access.redhat.com/errata/RHSA-2018:1348

https://access.redhat.com/errata/RHSA-2018:1354

https://access.redhat.com/errata/RHSA-2018:1355

https://access.redhat.com/errata/RHSA-2018:1374

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

https://lkml.org/lkml/2018/4/6/813

https://usn.ubuntu.com/3641-1/

https://usn.ubuntu.com/3641-2/

https://www.debian.org/security/2018/dsa-4187

https://www.debian.org/security/2018/dsa-4188

Details

Source: MITRE

Published: 2018-05-24

Updated: 2018-06-27

Type: CWE-388

Risk Information

CVSS v2.0

Base Score: 4.9

Vector: (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Impact Score: 6.9

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3.0

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 1.8

Severity: MEDIUM