CVE-2018-16658

MEDIUM
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4

http://www.securityfocus.com/bid/105334

https://access.redhat.com/errata/RHSA-2019:2029

https://access.redhat.com/errata/RHSA-2019:2043

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6

https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4

https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html

https://usn.ubuntu.com/3797-1/

https://usn.ubuntu.com/3797-2/

https://usn.ubuntu.com/3820-1/

https://usn.ubuntu.com/3820-2/

https://usn.ubuntu.com/3820-3/

https://usn.ubuntu.com/3822-1/

https://usn.ubuntu.com/3822-2/

https://www.debian.org/security/2018/dsa-4308

Details

Source: MITRE

Published: 2018-09-07

Updated: 2019-08-06

Type: CWE-200

Risk Information

CVSS v2

Base Score: 3.6

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

Impact Score: 4.9

Exploitability Score: 3.9

Severity: LOW

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Impact Score: 4.2

Exploitability Score: 1.8

Severity: MEDIUM

Tenable Plugins

View all (58 total)

IDNameProductFamilySeverity
147500F5 Networks BIG-IP : Linux kernel vulnerability (K40523020)NessusF5 Networks Local Security Checks
medium
131979RHEL 7 : kernel-alt (RHSA-2019:4154)NessusRed Hat Local Security Checks
high
128651CentOS 7 : kernel (CESA-2019:2029)NessusCentOS Local Security Checks
medium
128226Scientific Linux Security Update : kernel on SL7.x x86_64 (20190806)NessusScientific Linux Local Security Checks
medium
127655RHEL 7 : kernel-rt (RHSA-2019:2043)NessusRed Hat Local Security Checks
medium
127650RHEL 7 : kernel (RHSA-2019:2029)NessusRed Hat Local Security Checks
medium
125283SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1289-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
high
124971EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)NessusHuawei Local Security Checks
high
124833EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1511)NessusHuawei Local Security Checks
high
123875EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1189)NessusHuawei Local Security Checks
medium
123874EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1188)NessusHuawei Local Security Checks
medium
123366openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)NessusSuSE Local Security Checks
high
123329openSUSE Security Update : the Linux Kernel (openSUSE-2019-769)NessusSuSE Local Security Checks
high
122343SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0439-1)NessusSuSE Local Security Checks
high
122201EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1028)NessusHuawei Local Security Checks
high
122174EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-1027)NessusHuawei Local Security Checks
medium
121571SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:0224-1)NessusSuSE Local Security Checks
high
121468SUSE SLES11 Security Update : kernel (SUSE-SU-2019:13937-1)NessusSuSE Local Security Checks
high
121208SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0095-1)NessusSuSE Local Security Checks
high
120447Fedora 28 : kernel / kernel-headers / kernel-tools (2018-59e4747e0f)NessusFedora Local Security Checks
medium
120118SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2980-1)NessusSuSE Local Security Checks
high
119921EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1432)NessusHuawei Local Security Checks
high
119896EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1407)NessusHuawei Local Security Checks
medium
119647SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:4069-1)NessusSuSE Local Security Checks
high
119638Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4304)NessusOracle Linux Local Security Checks
high
119567Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4301)NessusOracle Linux Local Security Checks
high
119535Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4300)NessusOracle Linux Local Security Checks
high
119292OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0284)NessusOracleVM Local Security Checks
medium
119286SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3934-1)NessusSuSE Local Security Checks
high
119279Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4288)NessusOracle Linux Local Security Checks
medium
119077openSUSE Security Update : the Linux Kernel (openSUSE-2018-1427)NessusSuSE Local Security Checks
high
118973Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3822-1)NessusUbuntu Local Security Checks
high
118970Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3820-3)NessusUbuntu Local Security Checks
high
118969Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3820-2)NessusUbuntu Local Security Checks
high
118968Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3820-1)NessusUbuntu Local Security Checks
high
118952SUSE SLES11 Security Update : kernel (SUSE-SU-2018:3746-1)NessusSuSE Local Security Checks
high
118882SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:3689-1)NessusSuSE Local Security Checks
high
118818openSUSE Security Update : the Linux Kernel (openSUSE-2018-1342)NessusSuSE Local Security Checks
high
118328Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3797-2)NessusUbuntu Local Security Checks
high
118327Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3797-1)NessusUbuntu Local Security Checks
high
118107Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4250)NessusOracle Linux Local Security Checks
high
118055Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4245) (Foreshadow)NessusOracle Linux Local Security Checks
high
118053Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4242) (Foreshadow)NessusOracle Linux Local Security Checks
high
118041Amazon Linux 2 : kernel (ALAS-2018-1086)NessusAmazon Linux Local Security Checks
high
118034SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1)NessusSuSE Local Security Checks
high
118033SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3083-1)NessusSuSE Local Security Checks
high
117988openSUSE Security Update : the Linux Kernel (openSUSE-2018-1140)NessusSuSE Local Security Checks
high
117923Amazon Linux AMI : kernel (ALAS-2018-1086)NessusAmazon Linux Local Security Checks
high
117908Debian DLA-1531-1 : linux-4.9 security updateNessusDebian Local Security Checks
high
117862Debian DSA-4308-1 : linux - security updateNessusDebian Local Security Checks
high
117824SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2908-1)NessusSuSE Local Security Checks
high
117823SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2907-1)NessusSuSE Local Security Checks
high
117820SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2879-1)NessusSuSE Local Security Checks
high
117800SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2858-1)NessusSuSE Local Security Checks
high
117769Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4227)NessusOracle Linux Local Security Checks
high
117764OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0258)NessusOracleVM Local Security Checks
high
117629SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:2776-1)NessusSuSE Local Security Checks
high
117523openSUSE Security Update : the Linux Kernel (openSUSE-2018-1016)NessusSuSE Local Security Checks
high