CVE-2018-9568

HIGH
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

References

https://access.redhat.com/errata/RHSA-2019:0512

https://access.redhat.com/errata/RHSA-2019:0514

https://access.redhat.com/errata/RHSA-2019:2696

https://access.redhat.com/errata/RHSA-2019:2730

https://access.redhat.com/errata/RHSA-2019:2736

https://access.redhat.com/errata/RHSA-2019:3967

https://access.redhat.com/errata/RHSA-2019:4056

https://access.redhat.com/errata/RHSA-2019:4159

https://access.redhat.com/errata/RHSA-2019:4164

https://access.redhat.com/errata/RHSA-2019:4255

https://source.android.com/security/bulletin/2018-12-01

https://usn.ubuntu.com/3880-1/

https://usn.ubuntu.com/3880-2/

Details

Source: MITRE

Published: 2018-12-06

Updated: 2020-10-15

Type: CWE-704

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Tenable Plugins

View all (47 total)

IDNameProductFamilySeverity
134312NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2020-0021)NessusNewStart CGSL Local Security Checks
high
132232RHEL 6 : kernel (RHSA-2019:4255)NessusRed Hat Local Security Checks
high
131981RHEL 7 : kernel (RHSA-2019:4164)NessusRed Hat Local Security Checks
high
131980RHEL 7 : kernel (RHSA-2019:4159)NessusRed Hat Local Security Checks
high
131776NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2019-0212)NessusNewStart CGSL Local Security Checks
high
131530RHEL 6 : kernel (RHSA-2019:4056)NessusRed Hat Local Security Checks
high
131375RHEL 7 : kernel (RHSA-2019:3967)NessusRed Hat Local Security Checks
high
128977CentOS 6 : kernel (CESA-2019:2736)NessusCentOS Local Security Checks
high
128862Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190912)NessusScientific Linux Local Security Checks
high
128857RHEL 6 : kernel (RHSA-2019:2736)NessusRed Hat Local Security Checks
high
128854RHEL 6 : MRG (RHSA-2019:2730)NessusRed Hat Local Security Checks
high
128748Oracle Linux 6 : kernel (ELSA-2019-2736)NessusOracle Linux Local Security Checks
high
128662RHEL 7 : kernel (RHSA-2019:2696)NessusRed Hat Local Security Checks
high
127281NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)NessusNewStart CGSL Local Security Checks
critical
127272NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)NessusNewStart CGSL Local Security Checks
critical
125514EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-1587)NessusHuawei Local Security Checks
high
125283SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1289-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
high
124836EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1515)NessusHuawei Local Security Checks
critical
124398EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1302)NessusHuawei Local Security Checks
high
122954CentOS 7 : kernel (CESA-2019:0512)NessusCentOS Local Security Checks
high
122891SUSE SLES11 Security Update : kernel (SUSE-SU-2019:13979-1)NessusSuSE Local Security Checks
high
122887Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)NessusScientific Linux Local Security Checks
high
122864Oracle Linux 7 : kernel (ELSA-2019-0512)NessusOracle Linux Local Security Checks
high
122843RHEL 7 : kernel-rt (RHSA-2019:0514)NessusRed Hat Local Security Checks
high
122842RHEL 7 : kernel (RHSA-2019:0512)NessusRed Hat Local Security Checks
high
122837OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0009)NessusOracleVM Local Security Checks
high
122805Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2019-4577)NessusOracle Linux Local Security Checks
high
122804Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4576)NessusOracle Linux Local Security Checks
high
122803Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4575)NessusOracle Linux Local Security Checks
high
122609SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0541-1)NessusSuSE Local Security Checks
high
122343SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0439-1)NessusSuSE Local Security Checks
high
121633openSUSE Security Update : the Linux Kernel (openSUSE-2019-140)NessusSuSE Local Security Checks
high
121598Ubuntu 14.04 LTS : linux vulnerabilities (USN-3880-1)NessusUbuntu Local Security Checks
high
121571SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:0224-1)NessusSuSE Local Security Checks
high
121569SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0222-1) (Spectre)NessusSuSE Local Security Checks
high
121468SUSE SLES11 Security Update : kernel (SUSE-SU-2019:13937-1)NessusSuSE Local Security Checks
high
121466SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0196-1)NessusSuSE Local Security Checks
high
121344SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0148-1) (Spectre)NessusSuSE Local Security Checks
high
121289openSUSE Security Update : the Linux Kernel (openSUSE-2019-65)NessusSuSE Local Security Checks
high
121103Virtuozzo 7 : readykernel-patch (VZA-2018-088)NessusVirtuozzo Local Security Checks
high
121102Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2018-086)NessusVirtuozzo Local Security Checks
high
119810SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4196-1)NessusSuSE Local Security Checks
high
119809SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4195-1)NessusSuSE Local Security Checks
high
119747SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4158-1)NessusSuSE Local Security Checks
high
119746SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4157-1)NessusSuSE Local Security Checks
high
119745SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4154-1)NessusSuSE Local Security Checks
high
119744SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4153-1)NessusSuSE Local Security Checks
high