7.8

CVE-2018-7566

The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 4.15
Suse ≫ Linux Enterprise Server Version 12 SwEdition ltss
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
https://usn.ubuntu.com/3798-1/
Third Party Advisory
https://usn.ubuntu.com/3798-2/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2390
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory
https://usn.ubuntu.com/3631-1/
Third Party Advisory
https://usn.ubuntu.com/3631-2/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory
https://www.debian.org/security/2018/dsa-4188
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2384
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2395
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1483
http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html
Patch
Third Party Advisory
http://www.securityfocus.com/bid/103605
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2019:1487
https://bugzilla.redhat.com/show_bug.cgi?id=1550142
Patch
Third Party Advisory
Issue Tracking
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da
Patch
Vendor Advisory