CVE-2018-8822high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code.
References
http://www.securityfocus.com/bid/103476
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
https://usn.ubuntu.com/3653-1/
https://usn.ubuntu.com/3653-2/
https://usn.ubuntu.com/3654-1/
https://usn.ubuntu.com/3654-2/
https://usn.ubuntu.com/3655-1/
https://usn.ubuntu.com/3655-2/
https://usn.ubuntu.com/3656-1/
https://usn.ubuntu.com/3657-1/
https://www.debian.org/security/2018/dsa-4187
https://www.debian.org/security/2018/dsa-4188
https://www.mail-archive.com/[email protected]/msg223373.html
Details
Source: MITRE
Published: 2018-03-20
Updated: 2019-03-05
Type: CWE-119
Risk Information
CVSS v2
Base Score: 7.2
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.9
Severity: HIGH
CVSS v3
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.15.11 (inclusive)
cpe:2.3:o:linux:linux_kernel:4.16:rc:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.16:rc4:*:*:*:*:*:*
Configuration 2
OR
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Configuration 3
OR
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 124800 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1476) | Nessus | Huawei Local Security Checks | high |
| 121933 | Photon OS 2.0: Linux PHSA-2018-2.0-0037-(a) | Nessus | PhotonOS Local Security Checks | high |
| 121837 | Photon OS 1.0: Linux PHSA-2018-1.0-0132 | Nessus | PhotonOS Local Security Checks | high |
| 118252 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1173-2) | Nessus | SuSE Local Security Checks | high |
| 111934 | Photon OS 1.0: Linux / Rsync PHSA-2018-1.0-0132 (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 111296 | Photon OS 2.0 : linux-aws / linux-esx / linux-secure / linux (PhotonOS-PHSA-2018-2.0-0037-(a)) (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 110104 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-514) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 110052 | Ubuntu 17.10 : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3657-1) | Nessus | Ubuntu Local Security Checks | high |
| 110051 | Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2, Snapdragon) vulnerabilities (USN-3656-1) | Nessus | Ubuntu Local Security Checks | high |
| 110050 | Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3655-1) (Spectre) | Nessus | Ubuntu Local Security Checks | high |
| 110049 | Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3654-2) (Spectre) | Nessus | Ubuntu Local Security Checks | high |
| 110048 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3654-1) (Spectre) | Nessus | Ubuntu Local Security Checks | high |
| 110047 | Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3653-2) (Spectre) | Nessus | Ubuntu Local Security Checks | high |
| 110046 | Ubuntu 17.10 : Linux kernel vulnerabilities (USN-3653-1) (Spectre) | Nessus | Ubuntu Local Security Checks | high |
| 109758 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1221-1) | Nessus | SuSE Local Security Checks | high |
| 109757 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1220-1) | Nessus | SuSE Local Security Checks | high |
| 109647 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1173-1) | Nessus | SuSE Local Security Checks | high |
| 109646 | SUSE SLES11 Security Update : kernel (SUSE-SU-2018:1172-1) | Nessus | SuSE Local Security Checks | high |
| 109531 | Debian DLA-1369-1 : linux security update (Spectre) | Nessus | Debian Local Security Checks | critical |
| 109518 | Debian DSA-4188-1 : linux - security update (Spectre) | Nessus | Debian Local Security Checks | high |
| 109517 | Debian DSA-4187-1 : linux - security update (Spectre) | Nessus | Debian Local Security Checks | critical |
| 109360 | SUSE SLES11 Security Update : kernel (SUSE-SU-2018:1080-1) (Spectre) | Nessus | SuSE Local Security Checks | high |
| 109310 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:1048-1) | Nessus | SuSE Local Security Checks | high |