CVE-2018-13406 in Kernel

Sumário (Inglês)

An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

06/07/2018

Divulgação

06/07/2018

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
120484	Linux Kernel uvesafb.c uvesafb_setcmap Excesso de tampão	190	Não definido	Correção oficial	CVE-2018-13406

Fontes

• MITRE
• NVD
• CVE Details