CVE-2018-19854

Advisory lineage Upstream: 0 Downstream: 12
Modified
Published: 04 Dec 2018, 16:00
Last modified:05 Aug 2024, 11:44

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.7 MEDIUM
v3.0 (nvd)
EPSS Score
0.05% LOW
0% probability -0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Dec 2018, 16:00
Published
Vulnerability first disclosed
05 Aug 2024, 11:44
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option).

CVSS Metrics

  • v3.0•MEDIUM•Score: 4.7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  • v2.0•LOW•Score: 1.9AV:L/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.05%• Percentile: 17%

Techniques & Countermeasures

  • CWE-200•Exposure of Sensitive Information to an Unauthorized Actor

    The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 18.10

  • linux•linux_kernel

    < 4.19.3

References (10)