2 lines
4.1 KiB
JSON
2 lines
4.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Linux kernel through version 4.15","vendor":"n/a","versions":[{"status":"affected","version":"Linux kernel through version 4.15"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"EA4F2AD9-993F-4246-B6F9-7723FF82AF6C","versionEndIncluding":"4.15.15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image."},{"lang":"es","value":"La función ext4_xattr_check_entries en fs/ext4/xattr.c en el kernel de Linux hasta la versión 4.15.15 no valida correctamente los tamaños de xattr, lo que provoca una malinterpretación de un tamaño como un código de error y, en consecuencia, permite que los atacantes provoquen una denegación de servicio (desreferencia de puntero NULL en get_acl y cierre inesperado del sistema) mediante una imagen ext4 manipulada."}],"id":"CVE-2018-1095","lastModified":"2026-06-17T01:50:28.177","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-04-02T03:29:00.433","references":[{"source":"secalert@redhat.com","tags":["Mailing List"],"url":"http://openwall.com/lists/oss-security/2018/03/29/1"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2018:2948"},{"source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"],"url":"https://bugzilla.kernel.org/show_bug.cgi?id=199185"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560793"},{"source":"secalert@redhat.com","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=ce3fd194fcc6fbdc00ce095a852f22df97baa401"},{"source":"secalert@redhat.com","url":"https://usn.ubuntu.com/3695-1/"},{"source":"secalert@redhat.com","url":"https://usn.ubuntu.com/3695-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://openwall.com/lists/oss-security/2018/03/29/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2018:2948"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"],"url":"https://bugzilla.kernel.org/show_bug.cgi?id=199185"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560793"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=ce3fd194fcc6fbdc00ce095a852f22df97baa401"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://usn.ubuntu.com/3695-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://usn.ubuntu.com/3695-2/"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"nvd@nist.gov","type":"Primary"}]}
|