Veracode Vulnerability DatabaseVERACODE:19518Denial Of Service (DoS)
0.002 Low
EPSS
Percentile
64.9%
Linux kernel is vulnerable to NULL pointer dereference vulnerability. This is because the ext4/mballoc.c:ext4_process_freed_data() function in Linux kernel mishandles the case of a root directory with a zero i_links_count. A privileged attacker could cause a denial of service condition with a crafted ext4 image which may result in an application crash.
References
openwall.com/lists/oss-security/2018/03/29/1
access.redhat.com/articles/3553061
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
access.redhat.com/errata/RHSA-2018:2948
access.redhat.com/errata/RHSA-2018:3083
access.redhat.com/errata/RHSA-2018:3096
access.redhat.com/security/cve/CVE-2017-18360
access.redhat.com/security/cve/CVE-2018-1092
access.redhat.com/security/cve/CVE-2018-18690
access.redhat.com/security/updates/classification/#important
bugzilla.kernel.org/show_bug.cgi?id=199179
bugzilla.kernel.org/show_bug.cgi?id=199275
bugzilla.redhat.com/show_bug.cgi?id=1322930
bugzilla.redhat.com/show_bug.cgi?id=1488484
bugzilla.redhat.com/show_bug.cgi?id=1504058
bugzilla.redhat.com/show_bug.cgi?id=1507027
bugzilla.redhat.com/show_bug.cgi?id=1542494
bugzilla.redhat.com/show_bug.cgi?id=1557434
bugzilla.redhat.com/show_bug.cgi?id=1557599
bugzilla.redhat.com/show_bug.cgi?id=1558328
bugzilla.redhat.com/show_bug.cgi?id=1560777
bugzilla.redhat.com/show_bug.cgi?id=1561162
bugzilla.redhat.com/show_bug.cgi?id=1563697
bugzilla.redhat.com/show_bug.cgi?id=1564186
bugzilla.redhat.com/show_bug.cgi?id=1568167
bugzilla.redhat.com/show_bug.cgi?id=1572983
bugzilla.redhat.com/show_bug.cgi?id=1584775
bugzilla.redhat.com/show_bug.cgi?id=1592654
bugzilla.redhat.com/show_bug.cgi?id=1609717
git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44
lists.debian.org/debian-lts-announce/2018/05/msg00000.html
usn.ubuntu.com/3676-1/
usn.ubuntu.com/3676-2/
usn.ubuntu.com/3677-1/
usn.ubuntu.com/3677-2/
usn.ubuntu.com/3678-1/
usn.ubuntu.com/3678-2/
usn.ubuntu.com/3678-3/
usn.ubuntu.com/3678-4/
usn.ubuntu.com/3754-1/
www.debian.org/security/2018/dsa-4187
www.debian.org/security/2018/dsa-4188
Related
