CVE-2018-1094HIGH
Description
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.
References
http://openwall.com/lists/oss-security/2018/03/29/1
https://access.redhat.com/errata/RHSA-2018:2948
https://access.redhat.com/errata/RHSA-2018:3083
https://access.redhat.com/errata/RHSA-2018:3096
https://bugzilla.kernel.org/show_bug.cgi?id=199183
https://bugzilla.redhat.com/show_bug.cgi?id=1560788
Details
Source: MITRE
Published: 2018-04-02
Updated: 2020-11-09
Type: CWE-476
Risk Information
CVSS v2.0
Base Score: 7.1
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Impact Score: 6.9
Exploitability Score: 8.6
Severity: HIGH
CVSS v3.0
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.15.15 (inclusive)
Configuration 2
OR
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 124830 | EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1507) | Nessus | Huawei Local Security Checks | high |
| 124796 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1472) | Nessus | Huawei Local Security Checks | high |
| 123704 | EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1236) | Nessus | Huawei Local Security Checks | high |
| 123605 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1131) | Nessus | Huawei Local Security Checks | high |
| 123226 | openSUSE Security Update : the Linux Kernel (openSUSE-2019-536) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 122699 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1076) | Nessus | Huawei Local Security Checks | medium |
| 122045 | Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2019-4533) | Nessus | Oracle Linux Local Security Checks | high |
| 122044 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4532) | Nessus | Oracle Linux Local Security Checks | medium |
| 121942 | Photon OS 2.0: Linux PHSA-2018-2.0-0041 | Nessus | PhotonOS Local Security Checks | high |
| 121837 | Photon OS 1.0: Linux PHSA-2018-1.0-0132 | Nessus | PhotonOS Local Security Checks | high |
| 121605 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0002) | Nessus | OracleVM Local Security Checks | high |
| 121202 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4510) | Nessus | Oracle Linux Local Security Checks | medium |
| 120067 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2092-1) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 119187 | Scientific Linux Security Update : kernel on SL7.x x86_64 (20181030) | Nessus | Scientific Linux Local Security Checks | high |
| 118990 | CentOS 7 : kernel (CESA-2018:3083) | Nessus | CentOS Local Security Checks | high |
| 118770 | Oracle Linux 7 : kernel (ELSA-2018-3083) | Nessus | Oracle Linux Local Security Checks | high |
| 118528 | RHEL 7 : kernel-rt (RHSA-2018:3096) | Nessus | Red Hat Local Security Checks | high |
| 118525 | RHEL 7 : kernel (RHSA-2018:3083) | Nessus | Red Hat Local Security Checks | high |
| 118513 | RHEL 7 : kernel-alt (RHSA-2018:2948) (Spectre) | Nessus | Red Hat Local Security Checks | high |
| 118272 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-2) | Nessus | SuSE Local Security Checks | high |
| 111934 | Photon OS 1.0: Linux / Rsync PHSA-2018-1.0-0132 (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 111414 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-762) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 111300 | Photon OS 2.0 : ceph / linux-esx / rsync / linux / linux-secure / linux-aws (PhotonOS-PHSA-2018-2.0-0041) (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 111267 | Ubuntu 16.04 LTS : Linux kernel (HWE) regression (USN-3718-2) | Nessus | Ubuntu Local Security Checks | high |
| 111266 | Ubuntu 18.04 LTS : Linux kernel regression (USN-3718-1) | Nessus | Ubuntu Local Security Checks | high |
| 110895 | Ubuntu 16.04 LTS : linux-hwe, linux-azure vulnerabilities (USN-3695-2) | Nessus | Ubuntu Local Security Checks | high |
| 110894 | Ubuntu 18.04 LTS : linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities (USN-3695-1) | Nessus | Ubuntu Local Security Checks | high |
| 110838 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-1) | Nessus | SuSE Local Security Checks | high |
| 110658 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-656) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 110637 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1762-1) | Nessus | SuSE Local Security Checks | high |
| 110636 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1761-1) | Nessus | SuSE Local Security Checks | high |