CVE-2018-1093 in Linux

Resumen

por MITRE

The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 2017-12-04
• Divulgación: 2018-04-01
• Moderación: aceptado
• Artículo: VDB-115502
• CPE: listo
• CWE: CWE-125 (confirmado)
• CVSS: 5.5 (NVD)
• EPSS: 0.01999
• KEV: no
• Actividades: muy bajo
• Sector: Homeoffice, Pharma, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-1093
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-1093
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-1093/