1107 lines
48 KiB
JSON
1107 lines
48 KiB
JSON
{
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"product": "n/a",
|
|
"vendor": "n/a",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "n/a"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"datePublic": "2018-05-08T00:00:00.000Z",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs."
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"description": "n/a",
|
|
"lang": "en",
|
|
"type": "text"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"dateUpdated": "2019-09-21T08:06:09.000Z",
|
|
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
|
|
"shortName": "mitre"
|
|
},
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/4"
|
|
},
|
|
{
|
|
"name": "1040849",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040849"
|
|
},
|
|
{
|
|
"name": "104071",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_BID"
|
|
],
|
|
"url": "http://www.securityfocus.com/bid/104071"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1350",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1350"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://support.citrix.com/article/CTX234679"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1347",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1347"
|
|
},
|
|
{
|
|
"name": "44697",
|
|
"tags": [
|
|
"exploit",
|
|
"x_refsource_EXPLOIT-DB"
|
|
],
|
|
"url": "https://www.exploit-db.com/exploits/44697/"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
|
|
},
|
|
{
|
|
"name": "1040866",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040866"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/HT208742"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1346",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1346"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1348",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1348"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1354",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1354"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://svnweb.freebsd.org/base?view=revision&revision=333368"
|
|
},
|
|
{
|
|
"name": "DSA-4196",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN"
|
|
],
|
|
"url": "https://www.debian.org/security/2018/dsa-4196"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
|
|
},
|
|
{
|
|
"name": "1040744",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040744"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1351",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1351"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://xenbits.xen.org/xsa/advisory-260.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1319",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1319"
|
|
},
|
|
{
|
|
"name": "DSA-4201",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN"
|
|
],
|
|
"url": "https://www.debian.org/security/2018/dsa-4201"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1355",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1355"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1345",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1345"
|
|
},
|
|
{
|
|
"name": "45024",
|
|
"tags": [
|
|
"exploit",
|
|
"x_refsource_EXPLOIT-DB"
|
|
],
|
|
"url": "https://www.exploit-db.com/exploits/45024/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1349",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1349"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1352",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1352"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1318",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1318"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://patchwork.kernel.org/patch/10386677/"
|
|
},
|
|
{
|
|
"name": "VU#631579",
|
|
"tags": [
|
|
"third-party-advisory",
|
|
"x_refsource_CERT-VN"
|
|
],
|
|
"url": "https://www.kb.cert.org/vuls/id/631579"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://github.com/can1357/CVE-2018-8897/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1524",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1524"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/1"
|
|
},
|
|
{
|
|
"name": "1040861",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040861"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1353",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1353"
|
|
},
|
|
{
|
|
"name": "USN-3641-2",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_UBUNTU"
|
|
],
|
|
"url": "https://usn.ubuntu.com/3641-2/"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "https://www.synology.com/support/security/Synology_SA_18_21"
|
|
},
|
|
{
|
|
"name": "1040882",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040882"
|
|
},
|
|
{
|
|
"name": "USN-3641-1",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_UBUNTU"
|
|
],
|
|
"url": "https://usn.ubuntu.com/3641-1/"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
|
|
}
|
|
],
|
|
"x_legacyV4Record": {
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2018-8897",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9",
|
|
"refsource": "MISC",
|
|
"url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"name": "http://openwall.com/lists/oss-security/2018/05/08/4",
|
|
"refsource": "MISC",
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/4"
|
|
},
|
|
{
|
|
"name": "1040849",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1040849"
|
|
},
|
|
{
|
|
"name": "104071",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/104071"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1350",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1350"
|
|
},
|
|
{
|
|
"name": "https://support.citrix.com/article/CTX234679",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://support.citrix.com/article/CTX234679"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1347",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1347"
|
|
},
|
|
{
|
|
"name": "44697",
|
|
"refsource": "EXPLOIT-DB",
|
|
"url": "https://www.exploit-db.com/exploits/44697/"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
|
|
},
|
|
{
|
|
"name": "1040866",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1040866"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
|
|
"refsource": "MLIST",
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/HT208742",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/HT208742"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1346",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1346"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1348",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1348"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1354",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1354"
|
|
},
|
|
{
|
|
"name": "https://svnweb.freebsd.org/base?view=revision&revision=333368",
|
|
"refsource": "MISC",
|
|
"url": "https://svnweb.freebsd.org/base?view=revision&revision=333368"
|
|
},
|
|
{
|
|
"name": "DSA-4196",
|
|
"refsource": "DEBIAN",
|
|
"url": "https://www.debian.org/security/2018/dsa-4196"
|
|
},
|
|
{
|
|
"name": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc",
|
|
"refsource": "MISC",
|
|
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
|
|
},
|
|
{
|
|
"name": "1040744",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1040744"
|
|
},
|
|
{
|
|
"name": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html",
|
|
"refsource": "MISC",
|
|
"url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1351",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1351"
|
|
},
|
|
{
|
|
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074",
|
|
"refsource": "MISC",
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
|
|
},
|
|
{
|
|
"name": "https://xenbits.xen.org/xsa/advisory-260.html",
|
|
"refsource": "MISC",
|
|
"url": "https://xenbits.xen.org/xsa/advisory-260.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1319",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1319"
|
|
},
|
|
{
|
|
"name": "DSA-4201",
|
|
"refsource": "DEBIAN",
|
|
"url": "https://www.debian.org/security/2018/dsa-4201"
|
|
},
|
|
{
|
|
"name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1355",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1355"
|
|
},
|
|
{
|
|
"name": "https://security.netapp.com/advisory/ntap-20180927-0002/",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1345",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1345"
|
|
},
|
|
{
|
|
"name": "45024",
|
|
"refsource": "EXPLOIT-DB",
|
|
"url": "https://www.exploit-db.com/exploits/45024/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1349",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1349"
|
|
},
|
|
{
|
|
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1352",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1352"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1318",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1318"
|
|
},
|
|
{
|
|
"name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9",
|
|
"refsource": "MISC",
|
|
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"name": "https://patchwork.kernel.org/patch/10386677/",
|
|
"refsource": "MISC",
|
|
"url": "https://patchwork.kernel.org/patch/10386677/"
|
|
},
|
|
{
|
|
"name": "VU#631579",
|
|
"refsource": "CERT-VN",
|
|
"url": "https://www.kb.cert.org/vuls/id/631579"
|
|
},
|
|
{
|
|
"name": "https://github.com/can1357/CVE-2018-8897/",
|
|
"refsource": "MISC",
|
|
"url": "https://github.com/can1357/CVE-2018-8897/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1524",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1524"
|
|
},
|
|
{
|
|
"name": "http://openwall.com/lists/oss-security/2018/05/08/1",
|
|
"refsource": "MISC",
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/1"
|
|
},
|
|
{
|
|
"name": "1040861",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1040861"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1353",
|
|
"refsource": "REDHAT",
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1353"
|
|
},
|
|
{
|
|
"name": "USN-3641-2",
|
|
"refsource": "UBUNTU",
|
|
"url": "https://usn.ubuntu.com/3641-2/"
|
|
},
|
|
{
|
|
"name": "https://www.synology.com/support/security/Synology_SA_18_21",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://www.synology.com/support/security/Synology_SA_18_21"
|
|
},
|
|
{
|
|
"name": "1040882",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1040882"
|
|
},
|
|
{
|
|
"name": "USN-3641-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "https://usn.ubuntu.com/3641-1/"
|
|
},
|
|
{
|
|
"name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-05T07:10:46.698Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/4"
|
|
},
|
|
{
|
|
"name": "1040849",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040849"
|
|
},
|
|
{
|
|
"name": "104071",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_BID",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securityfocus.com/bid/104071"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1350",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1350"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.citrix.com/article/CTX234679"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1347",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1347"
|
|
},
|
|
{
|
|
"name": "44697",
|
|
"tags": [
|
|
"exploit",
|
|
"x_refsource_EXPLOIT-DB",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.exploit-db.com/exploits/44697/"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
|
|
},
|
|
{
|
|
"name": "1040866",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040866"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
|
|
},
|
|
{
|
|
"name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/HT208742"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1346",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1346"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1348",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1348"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1354",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1354"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://svnweb.freebsd.org/base?view=revision&revision=333368"
|
|
},
|
|
{
|
|
"name": "DSA-4196",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.debian.org/security/2018/dsa-4196"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
|
|
},
|
|
{
|
|
"name": "1040744",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040744"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1351",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1351"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://xenbits.xen.org/xsa/advisory-260.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1319",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1319"
|
|
},
|
|
{
|
|
"name": "DSA-4201",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.debian.org/security/2018/dsa-4201"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1355",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1355"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1345",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1345"
|
|
},
|
|
{
|
|
"name": "45024",
|
|
"tags": [
|
|
"exploit",
|
|
"x_refsource_EXPLOIT-DB",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.exploit-db.com/exploits/45024/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1349",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1349"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1352",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1352"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1318",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1318"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://patchwork.kernel.org/patch/10386677/"
|
|
},
|
|
{
|
|
"name": "VU#631579",
|
|
"tags": [
|
|
"third-party-advisory",
|
|
"x_refsource_CERT-VN",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.kb.cert.org/vuls/id/631579"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://github.com/can1357/CVE-2018-8897/"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1524",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1524"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://openwall.com/lists/oss-security/2018/05/08/1"
|
|
},
|
|
{
|
|
"name": "1040861",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040861"
|
|
},
|
|
{
|
|
"name": "RHSA-2018:1353",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://access.redhat.com/errata/RHSA-2018:1353"
|
|
},
|
|
{
|
|
"name": "USN-3641-2",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_UBUNTU",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://usn.ubuntu.com/3641-2/"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.synology.com/support/security/Synology_SA_18_21"
|
|
},
|
|
{
|
|
"name": "1040882",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_SECTRACK",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.securitytracker.com/id/1040882"
|
|
},
|
|
{
|
|
"name": "USN-3641-1",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_UBUNTU",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://usn.ubuntu.com/3641-1/"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"cveMetadata": {
|
|
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
|
|
"assignerShortName": "mitre",
|
|
"cveId": "CVE-2018-8897",
|
|
"datePublished": "2018-05-08T18:00:00.000Z",
|
|
"dateReserved": "2018-03-21T00:00:00.000Z",
|
|
"dateUpdated": "2024-08-05T07:10:46.698Z",
|
|
"state": "PUBLISHED"
|
|
},
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1"
|
|
} |