CVE-2018-5750

LOW

Description

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.

References

http://www.securitytracker.com/id/1040319

https://access.redhat.com/errata/RHSA-2018:0676

https://access.redhat.com/errata/RHSA-2018:1062

https://access.redhat.com/errata/RHSA-2018:2948

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

https://patchwork.kernel.org/patch/10174835/

https://usn.ubuntu.com/3631-1/

https://usn.ubuntu.com/3631-2/

https://usn.ubuntu.com/3697-1/

https://usn.ubuntu.com/3697-2/

https://usn.ubuntu.com/3698-1/

https://usn.ubuntu.com/3698-2/

https://www.debian.org/security/2018/dsa-4120

https://www.debian.org/security/2018/dsa-4187

Details

Source: MITRE

Published: 2018-01-26

Updated: 2019-03-07

Type: CWE-200

Risk Information

CVSS v2.0

Base Score: 2.1

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 3.9

Severity: LOW

CVSS v3.0

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score: 3.6

Exploitability Score: 1.8

Severity: MEDIUM

Vulnerable Software

ID	Name	Product	Family	Severity
124983	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1530)	Nessus	Huawei Local Security Checks	high
124834	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1512)	Nessus	Huawei Local Security Checks	high
118513	RHEL 7 : kernel-alt (RHSA-2018:2948) (Spectre)	Nessus	Red Hat Local Security Checks	high
117554	EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1245)	Nessus	Huawei Local Security Checks	high
111622	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4193)	Nessus	Oracle Linux Local Security Checks	medium
110900	Ubuntu 14.04 LTS : linux vulnerabilities (USN-3698-1)	Nessus	Ubuntu Local Security Checks	medium
110899	Ubuntu 16.04 LTS : linux-oem vulnerabilities (USN-3697-2)	Nessus	Ubuntu Local Security Checks	medium
110898	Ubuntu 17.10 : linux, linux-raspi2 vulnerabilities (USN-3697-1)	Nessus	Ubuntu Local Security Checks	medium
110072	OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0223) (Spectre)	Nessus	OracleVM Local Security Checks	high
110071	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4114) (Spectre)	Nessus	Oracle Linux Local Security Checks	high
109531	Debian DLA-1369-1 : linux security update (Spectre)	Nessus	Debian Local Security Checks	critical
109517	Debian DSA-4187-1 : linux - security update (Spectre)	Nessus	Debian Local Security Checks	critical
109449	Scientific Linux Security Update : kernel on SL7.x x86_64 (Meltdown)	Nessus	Scientific Linux Local Security Checks	critical
109380	CentOS 7 : kernel (CESA-2018:1062)	Nessus	CentOS Local Security Checks	critical
109315	Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3631-2)	Nessus	Ubuntu Local Security Checks	high
109314	Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3631-1)	Nessus	Ubuntu Local Security Checks	high
109127	Amazon Linux 2 : kernel (ALAS-2018-956) (Dirty COW) (Spectre)	Nessus	Amazon Linux Local Security Checks	medium
109113	Oracle Linux 7 : kernel (ELSA-2018-1062)	Nessus	Oracle Linux Local Security Checks	critical
108997	RHEL 7 : kernel (RHSA-2018:1062)	Nessus	Red Hat Local Security Checks	critical
108984	RHEL 7 : kernel-rt (RHSA-2018:0676)	Nessus	Red Hat Local Security Checks	critical
108459	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1055)	Nessus	Huawei Local Security Checks	high
108458	EulerOS 2.0 SP1 : kernel (EulerOS-SA-2018-1054)	Nessus	Huawei Local Security Checks	high
106955	Debian DSA-4120-1 : linux - security update (Meltdown) (Spectre)	Nessus	Debian Local Security Checks	medium
106933	Amazon Linux AMI : kernel (ALAS-2018-956) (Dirty COW) (Spectre)	Nessus	Amazon Linux Local Security Checks	medium
106596	Fedora 26 : kernel (2018-d82b617d6c)	Nessus	Fedora Local Security Checks	high
106595	Fedora 27 : kernel (2018-d09a73ce72)	Nessus	Fedora Local Security Checks	high