CVE-2018-1092

HIGH

Description

The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.

References

http://openwall.com/lists/oss-security/2018/03/29/1

https://access.redhat.com/errata/RHSA-2018:2948

https://access.redhat.com/errata/RHSA-2018:3083

https://access.redhat.com/errata/RHSA-2018:3096

https://bugzilla.kernel.org/show_bug.cgi?id=199179

https://bugzilla.kernel.org/show_bug.cgi?id=199275

https://bugzilla.redhat.com/show_bug.cgi?id=1560777

https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

https://usn.ubuntu.com/3676-1/

https://usn.ubuntu.com/3676-2/

https://usn.ubuntu.com/3677-1/

https://usn.ubuntu.com/3677-2/

https://usn.ubuntu.com/3678-1/

https://usn.ubuntu.com/3678-2/

https://usn.ubuntu.com/3678-3/

https://usn.ubuntu.com/3678-4/

https://usn.ubuntu.com/3754-1/

https://www.debian.org/security/2018/dsa-4187

https://www.debian.org/security/2018/dsa-4188

Details

Source: MITRE

Published: 2018-04-02

Updated: 2018-10-31

Type: CWE-476

Risk Information

CVSS v2.0

Base Score: 7.1

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 8.6

Severity: HIGH

CVSS v3.0

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 1.8

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.15.15 (inclusive)

Tenable Plugins

View all (39 total)

IDNameProductFamilySeverity
124830EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1507)NessusHuawei Local Security Checks
high
124800EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1476)NessusHuawei Local Security Checks
high
123697EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1229)NessusHuawei Local Security Checks
high
123226openSUSE Security Update : the Linux Kernel (openSUSE-2019-536) (Spectre)NessusSuSE Local Security Checks
high
122699EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1076)NessusHuawei Local Security Checks
medium
121942Photon OS 2.0: Linux PHSA-2018-2.0-0041NessusPhotonOS Local Security Checks
high
121837Photon OS 1.0: Linux PHSA-2018-1.0-0132NessusPhotonOS Local Security Checks
high
121605OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0002)NessusOracleVM Local Security Checks
high
120977Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4316)NessusOracle Linux Local Security Checks
high
120976Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4315)NessusOracle Linux Local Security Checks
high
120067SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2092-1) (Spectre)NessusSuSE Local Security Checks
high
119921EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1432)NessusHuawei Local Security Checks
high
119187Scientific Linux Security Update : kernel on SL7.x x86_64 (20181030)NessusScientific Linux Local Security Checks
high
118990CentOS 7 : kernel (CESA-2018:3083)NessusCentOS Local Security Checks
high
118770Oracle Linux 7 : kernel (ELSA-2018-3083)NessusOracle Linux Local Security Checks
high
118528RHEL 7 : kernel-rt (RHSA-2018:3096)NessusRed Hat Local Security Checks
high
118525RHEL 7 : kernel (RHSA-2018:3083)NessusRed Hat Local Security Checks
high
118513RHEL 7 : kernel-alt (RHSA-2018:2948) (Spectre)NessusRed Hat Local Security Checks
high
118272SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-2)NessusSuSE Local Security Checks
high
112113Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3754-1)NessusUbuntu Local Security Checks
high
111934Photon OS 1.0: Linux / Rsync PHSA-2018-1.0-0132 (deprecated)NessusPhotonOS Local Security Checks
high
111414openSUSE Security Update : the Linux Kernel (openSUSE-2018-762) (Spectre)NessusSuSE Local Security Checks
high
111300Photon OS 2.0 : ceph / linux-esx / rsync / linux / linux-secure / linux-aws (PhotonOS-PHSA-2018-2.0-0041) (deprecated)NessusPhotonOS Local Security Checks
high
110838SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-1)NessusSuSE Local Security Checks
high
110658openSUSE Security Update : the Linux Kernel (openSUSE-2018-656) (Spectre)NessusSuSE Local Security Checks
high
110637SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1762-1)NessusSuSE Local Security Checks
high
110636SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1761-1)NessusSuSE Local Security Checks
high
110550Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3678-4)NessusUbuntu Local Security Checks
high
110513Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-3)NessusUbuntu Local Security Checks
high
110481Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-2)NessusUbuntu Local Security Checks
high
110480Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3678-1)NessusUbuntu Local Security Checks
high
110479Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3677-2)NessusUbuntu Local Security Checks
high
110478Ubuntu 17.10 : Linux kernel vulnerabilities (USN-3677-1)NessusUbuntu Local Security Checks
high
110477Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3676-2)NessusUbuntu Local Security Checks
high
110476Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3676-1)NessusUbuntu Local Security Checks
high
109948Slackware 14.2 : Slackware 14.2 kernel (SSA:2018-142-01)NessusSlackware Local Security Checks
high
109531Debian DLA-1369-1 : linux security update (Spectre)NessusDebian Local Security Checks
critical
109518Debian DSA-4188-1 : linux - security update (Spectre)NessusDebian Local Security Checks
high
109517Debian DSA-4187-1 : linux - security update (Spectre)NessusDebian Local Security Checks
critical