CVE-2018-10840

Description

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image.

CVSS Metrics

• v3.1•MEDIUM•Score: 6.6CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• v3.0•MEDIUM•Score: 5.2CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
• v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.10%• Percentile: 28%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

• CWE-122•Heap-based Buffer Overflow

  A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Affected Systems

• canonical•ubuntu_linux

  14.04 | 18.04

• kernel•heap-based buffer overflow in fs/ext4/xattr.c

  n/a

• linux•linux_kernel

  na

• redhat•enterprise_linux

  7.0

References (6)

• https://usn.ubuntu.com/3752-2/
• https://usn.ubuntu.com/3752-3/
• https://access.redhat.com/errata/RHSA-2019:0162
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10840
• http://www.securityfocus.com/bid/104858
• https://usn.ubuntu.com/3752-1/