5.5

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 4.14
Linux ≫ Linux Kernel Version4.15 Updaterc1
Linux ≫ Linux Kernel Version4.15 Updaterc2
Linux ≫ Linux Kernel Version4.15 Updaterc3
Linux ≫ Linux Kernel Version4.15 Updaterc4
Linux ≫ Linux Kernel Version4.15 Updaterc5
Linux ≫ Linux Kernel Version4.15 Updaterc6
Linux ≫ Linux Kernel Version4.15 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.309
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
secalert@redhat.com 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://access.redhat.com/errata/RHSA-2018:3651
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3666
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3843
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14646
Patch
Vendor Advisory
Issue Tracking
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f428fe4a04cc339166c8bbd489789760de3a0cee
Patch
Third Party Advisory
https://marc.info/?l=linux-netdev&m=151500466401174&w=2
Patch
Third Party Advisory