7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
28.1%
Severity: Low
Date : 2018-11-01
CVE-ID : CVE-2018-18445
Package : linux-lts
Type : denial of service
Remote : No
Link : https://security.archlinux.org/AVG-801
The package linux-lts before version 4.14.75-1 is vulnerable to denial
of service.
Upgrade to 4.14.75-1.
The problem has been fixed upstream in version 4.14.75.
None.
In the Linux kernel 4.14.x before 4.14.75 and 4.18.x before 4.18.13,
faulty computation of numeric bounds in the BPF verifier permits out-
of-bounds memory accesses because adjust_scalar_min_max_vals in
kernel/bpf/verifier.c mishandles 32-bit right shifts.
A local attacker is able to crash the kernel and leak information using
a specially crafted BPF program.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b799207e1e1816b09e7a5920fbb2d5fcf6edd681
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.75
https://bugs.chromium.org/p/project-zero/issues/detail?id=1686
https://seclists.org/oss-sec/2018/q4/69
https://security.archlinux.org/CVE-2018-18445
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b799207e1e1816b09e7a5920fbb2d5fcf6edd681
bugs.chromium.org/p/project-zero/issues/detail?id=1686
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.75
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13
seclists.org/oss-sec/2018/q4/69
security.archlinux.org/AVG-801
security.archlinux.org/CVE-2018-18445
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
28.1%