CVE-2018-13094medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.
References
https://access.redhat.com/errata/RHSA-2019:0831
https://access.redhat.com/errata/RHSA-2019:2029
https://access.redhat.com/errata/RHSA-2019:2043
https://bugzilla.kernel.org/show_bug.cgi?id=199969
https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a
https://usn.ubuntu.com/3752-1/
https://usn.ubuntu.com/3752-2/
https://usn.ubuntu.com/3752-3/
https://usn.ubuntu.com/3753-1/
Details
Source: MITRE
Published: 2018-07-03
Updated: 2019-04-23
Type: CWE-476
Risk Information
CVSS v2
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.17.3 (inclusive)
Configuration 2
OR
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 141789 | Slackware 14.2 : Slackware 14.2 kernel (SSA:2020-295-01) | Nessus | Slackware Local Security Checks | high |
| 135485 | Photon OS 1.0: Linux PHSA-2020-1.0-0287 | Nessus | PhotonOS Local Security Checks | medium |
| 135305 | Photon OS 2.0: Linux PHSA-2020-2.0-0225 | Nessus | PhotonOS Local Security Checks | high |
| 134240 | Debian DLA-2114-1 : linux-4.9 security update | Nessus | Debian Local Security Checks | critical |
| 130736 | EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-2274) | Nessus | Huawei Local Security Checks | critical |
| 128651 | CentOS 7 : kernel (CESA-2019:2029) | Nessus | CentOS Local Security Checks | medium |
| 128226 | Scientific Linux Security Update : kernel on SL7.x x86_64 (20190806) | Nessus | Scientific Linux Local Security Checks | medium |
| 127655 | RHEL 7 : kernel-rt (RHSA-2019:2043) | Nessus | Red Hat Local Security Checks | medium |
| 127650 | RHEL 7 : kernel (RHSA-2019:2029) | Nessus | Red Hat Local Security Checks | medium |
| 124833 | EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1511) | Nessus | Huawei Local Security Checks | high |
| 124826 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1503) | Nessus | Huawei Local Security Checks | critical |
| 124257 | RHEL 7 : kernel-alt (RHSA-2019:0831) | Nessus | Red Hat Local Security Checks | high |
| 123909 | EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1223) | Nessus | Huawei Local Security Checks | high |
| 123906 | EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1220) | Nessus | Huawei Local Security Checks | high |
| 123329 | openSUSE Security Update : the Linux Kernel (openSUSE-2019-769) | Nessus | SuSE Local Security Checks | high |
| 122699 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1076) | Nessus | Huawei Local Security Checks | high |
| 122414 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1062) | Nessus | Huawei Local Security Checks | high |
| 120418 | Fedora 28 : kernel (2018-50075276e8) | Nessus | Fedora Local Security Checks | high |
| 120118 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2980-1) | Nessus | SuSE Local Security Checks | high |
| 119638 | Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4304) | Nessus | Oracle Linux Local Security Checks | high |
| 119566 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0286) | Nessus | OracleVM Local Security Checks | high |
| 119534 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4299) | Nessus | Oracle Linux Local Security Checks | high |
| 118034 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1) | Nessus | SuSE Local Security Checks | high |
| 117988 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-1140) | Nessus | SuSE Local Security Checks | high |
| 117800 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2858-1) | Nessus | SuSE Local Security Checks | high |
| 117629 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:2776-1) | Nessus | SuSE Local Security Checks | high |
| 117523 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-1016) | Nessus | SuSE Local Security Checks | high |
| 112189 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel (Azure, GCP, OEM) vulnerabilities (USN-3752-3) | Nessus | Ubuntu Local Security Checks | high |
| 112113 | Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3754-1) | Nessus | Ubuntu Local Security Checks | critical |
| 112112 | Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3753-2) | Nessus | Ubuntu Local Security Checks | high |
| 112111 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3753-1) | Nessus | Ubuntu Local Security Checks | high |
| 112110 | Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3752-2) | Nessus | Ubuntu Local Security Checks | high |
| 112109 | Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3752-1) | Nessus | Ubuntu Local Security Checks | high |
| 111552 | Amazon Linux AMI : kernel (ALAS-2018-1048) | Nessus | Amazon Linux Local Security Checks | medium |
| 111551 | Amazon Linux 2 : kernel (ALAS-2018-1051) | Nessus | Amazon Linux Local Security Checks | medium |
| 111243 | Fedora 27 : kernel (2018-8484550fff) | Nessus | Fedora Local Security Checks | high |