7.8

CVE-2018-5332

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.2.99
Linux ≫ Linux Kernel Version >= 3.3 < 3.16.54
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.92
Linux ≫ Linux Kernel Version >= 3.19 < 4.1.50
Linux ≫ Linux Kernel Version >= 4.2 < 4.4.112
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.77
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.44
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version17.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.338
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://usn.ubuntu.com/3619-1/
Third Party Advisory
https://usn.ubuntu.com/3619-2/
Third Party Advisory
https://usn.ubuntu.com/3620-1/
Third Party Advisory
https://usn.ubuntu.com/3620-2/
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory
https://usn.ubuntu.com/3617-1/
Third Party Advisory
https://usn.ubuntu.com/3617-2/
Third Party Advisory
https://usn.ubuntu.com/3617-3/
Third Party Advisory
https://usn.ubuntu.com/3632-1/
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102507
Third Party Advisory
Broken Link
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0470
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=60daca9efbb3e4109ebc1f7069543e5573fc124e
Patch
Vendor Advisory
Mailing List
https://github.com/torvalds/linux/commit/c095508770aebf1b9218e77026e48345d719b17c
Patch
Vendor Advisory