CVE-2018-17972

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html

http://www.securityfocus.com/bid/105525

https://access.redhat.com/errata/RHSA-2019:0512

https://access.redhat.com/errata/RHSA-2019:0514

https://access.redhat.com/errata/RHSA-2019:0831

https://access.redhat.com/errata/RHSA-2019:2473

https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://marc.info/?l=linux-fsdevel&m=153806242024956&w=2

https://support.f5.com/csp/article/K27673650?utm_source=f5support&utm_medium=RSS

https://usn.ubuntu.com/3821-1/

https://usn.ubuntu.com/3821-2/

https://usn.ubuntu.com/3832-1/

https://usn.ubuntu.com/3835-1/

https://usn.ubuntu.com/3871-1/

https://usn.ubuntu.com/3871-3/

https://usn.ubuntu.com/3871-4/

https://usn.ubuntu.com/3871-5/

https://usn.ubuntu.com/3880-1/

https://usn.ubuntu.com/3880-2/

Details

Source: MITRE

Published: 2018-10-03

Updated: 2020-10-15

Type: CWE-362

Risk Information

CVSS v2

Base Score: 4.9

Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

Impact Score: 6.9

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score: 3.6

Exploitability Score: 1.8

Severity: MEDIUM

Tenable Plugins

View all (53 total)

IDNameProductFamilySeverity
150662SUSE SLES11 Security Update : kernel (SUSE-SU-2019:14089-1)NessusSuSE Local Security Checks
high
134312NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2020-0021)NessusNewStart CGSL Local Security Checks
high
132562F5 Networks BIG-IP : Linux kernel vulnerability (K27673650)NessusF5 Networks Local Security Checks
medium
131845EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-2353)NessusHuawei Local Security Checks
critical
128689NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2019-0177)NessusNewStart CGSL Local Security Checks
high
128032Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2019-067)NessusVirtuozzo Local Security Checks
high
127982Oracle Linux 6 : kernel (ELSA-2019-2473)NessusOracle Linux Local Security Checks
high
127919CentOS 6 : kernel (CESA-2019:2473)NessusCentOS Local Security Checks
high
127880Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190813)NessusScientific Linux Local Security Checks
high
127878RHEL 6 : kernel (RHSA-2019:2473)NessusRed Hat Local Security Checks
high
127281NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)NessusNewStart CGSL Local Security Checks
critical
127272NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)NessusNewStart CGSL Local Security Checks
critical
126240SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1692-1) (SACK Panic) (SACK Slowness)NessusSuSE Local Security Checks
high
125995SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1534-1) (SACK Panic) (SACK Slowness)NessusSuSE Local Security Checks
high
125994SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1533-1) (SACK Panic) (SACK Slowness)NessusSuSE Local Security Checks
high
125993SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:1532-1) (SACK Panic) (SACK Slowness)NessusSuSE Local Security Checks
high
125990SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1527-1) (SACK Panic) (SACK Slowness)NessusSuSE Local Security Checks
high
125303openSUSE Security Update : the Linux Kernel (openSUSE-2019-1407) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
high
124971EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)NessusHuawei Local Security Checks
high
124834EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1512)NessusHuawei Local Security Checks
high
124430EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-1303)NessusHuawei Local Security Checks
high
124257RHEL 7 : kernel-alt (RHSA-2019:0831)NessusRed Hat Local Security Checks
high
123909EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1223)NessusHuawei Local Security Checks
high
123906EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1220)NessusHuawei Local Security Checks
high
123420Debian DLA-1731-2 : linux regression update (Spectre)NessusDebian Local Security Checks
medium
122954CentOS 7 : kernel (CESA-2019:0512)NessusCentOS Local Security Checks
high
122887Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)NessusScientific Linux Local Security Checks
high
122879Debian DLA-1715-1 : linux-4.9 security update (Spectre)NessusDebian Local Security Checks
high
122864Oracle Linux 7 : kernel (ELSA-2019-0512)NessusOracle Linux Local Security Checks
high
122843RHEL 7 : kernel-rt (RHSA-2019:0514)NessusRed Hat Local Security Checks
high
122842RHEL 7 : kernel (RHSA-2019:0512)NessusRed Hat Local Security Checks
high
122805Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2019-4577)NessusOracle Linux Local Security Checks
high
122201EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1028)NessusHuawei Local Security Checks
high
122141Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4541)NessusOracle Linux Local Security Checks
high
122087OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0007) (Spectre)NessusOracleVM Local Security Checks
medium
122052Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : linux-azure vulnerabilities (USN-3871-5)NessusUbuntu Local Security Checks
high
122044Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4532)NessusOracle Linux Local Security Checks
medium
121630Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4531)NessusOracle Linux Local Security Checks
medium
121598Ubuntu 14.04 LTS : linux vulnerabilities (USN-3880-1)NessusUbuntu Local Security Checks
high
121594Ubuntu 16.04 LTS : linux-hwe, linux-aws-hwe, linux-gcp vulnerabilities (USN-3871-4)NessusUbuntu Local Security Checks
high
121593Ubuntu 18.04 LTS : linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities (USN-3871-3)NessusUbuntu Local Security Checks
high
121592Ubuntu 18.04 LTS : Linux kernel regression (USN-3871-2)NessusUbuntu Local Security Checks
high
121505Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-030-01)NessusSlackware Local Security Checks
high
121469Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3871-1)NessusUbuntu Local Security Checks
high
120883Fedora 29 : kernel / kernel-headers / kernel-tools (2018-ec3bf1b228)NessusFedora Local Security Checks
medium
120659Fedora 28 : kernel / kernel-headers / kernel-tools (2018-9f4381d8c4)NessusFedora Local Security Checks
medium
119338Ubuntu 18.10 : linux, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities (USN-3835-1)NessusUbuntu Local Security Checks
high
119302Ubuntu 18.10 : Linux kernel (AWS) vulnerabilities (USN-3832-1)NessusUbuntu Local Security Checks
high
118972Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3821-2)NessusUbuntu Local Security Checks
medium
118971Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3821-1)NessusUbuntu Local Security Checks
medium
118832Amazon Linux 2 : kernel (ALAS-2018-1100)NessusAmazon Linux Local Security Checks
medium
118804Amazon Linux AMI : kernel (ALAS-2018-1100)NessusAmazon Linux Local Security Checks
medium
118160Fedora 27 : kernel / kernel-headers / kernel-tools (2018-2ee3411cb8)NessusFedora Local Security Checks
medium