Vulnerability-Lookup

RHSA-2018:1318

Vulnerability from csaf_opensuse - Published: 2018-05-08 00:00 - Updated: 2026-09-20 11:00

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2018:1318. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2018:1318.

Patchnames: RHSA-2018:1318

CVE-2017-16939

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2018-1000199

7.1 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2017-16939

Threats

Impact important

CVE-2018-1068

8.4 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2017-16939

Threats

Impact important

CVE-2018-1087

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2017-16939

Threats

Impact important

CVE-2018-1091

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 12 products, the same list as for CVE-2017-16939

Threats

Impact low

CVE-2018-8897

7 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 12 products, the same list as for CVE-2017-16939

Threats

Impact important

References

38 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2017-16939/	self
https://www.suse.com/security/cve/CVE-2018-1000199/	self
https://www.suse.com/security/cve/CVE-2018-1068/	self
https://www.suse.com/security/cve/CVE-2018-1087/	self
https://www.suse.com/security/cve/CVE-2018-1091/	self
https://www.suse.com/security/cve/CVE-2018-8897/	self
https://www.suse.com/security/cve/CVE-2017-16939	external
https://bugzilla.suse.com/1069702	external
https://bugzilla.suse.com/1069708	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/1120260	external
https://www.suse.com/security/cve/CVE-2018-1000199	external
https://bugzilla.suse.com/1089895	external
https://bugzilla.suse.com/1090036	external
https://www.suse.com/security/cve/CVE-2018-1068	external
https://bugzilla.suse.com/1085107	external
https://bugzilla.suse.com/1085114	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1123903	external
https://www.suse.com/security/cve/CVE-2018-1087	external
https://bugzilla.suse.com/1087088	external
https://www.suse.com/security/cve/CVE-2018-1091	external
https://bugzilla.suse.com/1087231	external
https://www.suse.com/security/cve/CVE-2018-8897	external
https://bugzilla.suse.com/1087078	external
https://bugzilla.suse.com/1087088	external
https://bugzilla.suse.com/1090368	external
https://bugzilla.suse.com/1090820	external
https://bugzilla.suse.com/1090869	external
https://bugzilla.suse.com/1092497	external
https://bugzilla.suse.com/1093522	external
https://bugzilla.suse.com/1093524	external
https://bugzilla.suse.com/1098813	external
https://bugzilla.suse.com/1100835	external
https://bugzilla.suse.com/1115893	external
https://bugzilla.suse.com/1178658	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2018:1318.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2018:1318.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2018:1318",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_1318.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-16939 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-16939/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1000199 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1000199/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1068 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1068/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1087 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1091 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1091/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-8897 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-8897/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:00:57Z",
      "generator": {
        "date": "2018-05-08T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2018:1318",
      "initial_release_date": "2018-05-08T00:00:00Z",
      "revision_history": [
        {
          "date": "2018-05-08T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:00:57Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-862.2.3.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-862.2.3.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-862.2.3.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-862.2.3.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-862.2.3.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-862.2.3.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-862.2.3.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-862.2.3.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-862.2.3.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-862.2.3.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-862.2.3.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "perf-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-862.2.3.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-862.2.3.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-862.2.3.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-862.2.3.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-862.2.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-862.2.3.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-862.2.3.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-862.2.3.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-862.2.3.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-862.2.3.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-16939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-16939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-16939",
          "url": "https://www.suse.com/security/cve/CVE-2017-16939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069702 for CVE-2017-16939",
          "url": "https://bugzilla.suse.com/1069702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069708 for CVE-2017-16939",
          "url": "https://bugzilla.suse.com/1069708"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1115893 for CVE-2017-16939",
          "url": "https://bugzilla.suse.com/1115893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120260 for CVE-2017-16939",
          "url": "https://bugzilla.suse.com/1120260"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-16939"
    },
    {
      "cve": "CVE-2018-1000199",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1000199"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1000199",
          "url": "https://www.suse.com/security/cve/CVE-2018-1000199"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089895 for CVE-2018-1000199",
          "url": "https://bugzilla.suse.com/1089895"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1090036 for CVE-2018-1000199",
          "url": "https://bugzilla.suse.com/1090036"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-1000199"
    },
    {
      "cve": "CVE-2018-1068",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1068"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux 4.x kernel\u0027s implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1068",
          "url": "https://www.suse.com/security/cve/CVE-2018-1068"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1085107 for CVE-2018-1068",
          "url": "https://bugzilla.suse.com/1085107"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1085114 for CVE-2018-1068",
          "url": "https://bugzilla.suse.com/1085114"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087082 for CVE-2018-1068",
          "url": "https://bugzilla.suse.com/1087082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123903 for CVE-2018-1068",
          "url": "https://bugzilla.suse.com/1123903"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-1068"
    },
    {
      "cve": "CVE-2018-1087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel\u0027s KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1087",
          "url": "https://www.suse.com/security/cve/CVE-2018-1087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087088 for CVE-2018-1087",
          "url": "https://bugzilla.suse.com/1087088"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-1087"
    },
    {
      "cve": "CVE-2018-1091",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1091"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1091",
          "url": "https://www.suse.com/security/cve/CVE-2018-1091"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087231 for CVE-2018-1091",
          "url": "https://bugzilla.suse.com/1087231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-1091"
    },
    {
      "cve": "CVE-2018-8897",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-8897"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer\u0027s Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u003c 3, the debug exception is delivered after the transfer to CPL \u003c 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-8897",
          "url": "https://www.suse.com/security/cve/CVE-2018-8897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087078 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1087078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087088 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1087088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1090368 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1090368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1090820 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1090820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1090869 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1090869"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1092497 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1092497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1093522 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1093522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1093524 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1093524"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1098813 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1098813"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1100835 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1100835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1115893 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1115893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2018-8897",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:kernel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-862.2.3.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-862.2.3.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-862.2.3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-05-08T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-8897"
    }
  ]
}

CVE-2017-16939 (GCVE-0-2017-16939)

Vulnerability from cvelistv5 – Published: 2017-11-24 10:00 – Updated: 2024-08-05 20:43

Summary

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
https://www.debian.org/security/2018/dsa-4082	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2017…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.suse.com/show_bug.cgi?id=1069702	x_refsource_MISC
https://github.com/torvalds/linux/commit/1137b5e2…	x_refsource_MISC
http://www.kernel.org/pub/linux/kernel/v4.x/Chang…	x_refsource_MISC
http://seclists.org/fulldisclosure/2017/Nov/40	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/101954	vdb-entryx_refsource_BID
https://blogs.securiteam.com/index.php/archives/3535	x_refsource_MISC
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisoryx_refsource_REDHAT

Date Public

2017-11-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:43:59.514Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1069702"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2017/Nov/40"
          },
          {
            "name": "RHSA-2018:1355",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1355"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "name": "101954",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101954"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.securiteam.com/index.php/archives/3535"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-11-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-14T22:06:08.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1069702"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2017/Nov/40"
        },
        {
          "name": "RHSA-2018:1355",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1355"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "name": "101954",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101954"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.securiteam.com/index.php/archives/3535"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-16939",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1069702",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1069702"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11",
              "refsource": "MISC",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11"
            },
            {
              "name": "http://seclists.org/fulldisclosure/2017/Nov/40",
              "refsource": "MISC",
              "url": "http://seclists.org/fulldisclosure/2017/Nov/40"
            },
            {
              "name": "RHSA-2018:1355",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1355"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "101954",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101954"
            },
            {
              "name": "https://blogs.securiteam.com/index.php/archives/3535",
              "refsource": "MISC",
              "url": "https://blogs.securiteam.com/index.php/archives/3535"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1137b5e2529a8f5ca8ee709288ecba3e68044df2"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            },
            {
              "name": "RHSA-2019:1190",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1190"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-16939",
    "datePublished": "2017-11-24T10:00:00.000Z",
    "dateReserved": "2017-11-24T00:00:00.000Z",
    "dateUpdated": "2024-08-05T20:43:59.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-1000199 (GCVE-0-2018-1000199)

Vulnerability from cvelistv5 – Published: 2018-05-24 13:00 – Updated: 2024-08-05 12:40

Summary

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:1347	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1348	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4188	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:1354	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1040806	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:1355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1345	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1374	vendor-advisoryx_refsource_REDHAT
https://lkml.org/lkml/2018/4/6/813	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3641-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3641-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2018-04-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:40:46.875Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "RHSA-2018:1347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1347"
          },
          {
            "name": "RHSA-2018:1348",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1348"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "RHSA-2018:1354",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1354"
          },
          {
            "name": "1040806",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040806"
          },
          {
            "name": "RHSA-2018:1355",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1355"
          },
          {
            "name": "RHSA-2018:1345",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1345"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "name": "RHSA-2018:1374",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1374"
          },
          {
            "name": "[linux-kernel] 20180406 [PATCH 3.18 40/93] perf/hwbp: Simplify the perf-hwbp code, fix documentation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2018/4/6/813"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3641-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-2/"
          },
          {
            "name": "USN-3641-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-1/"
          },
          {
            "name": "openSUSE-SU-2020:0801",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-05-18T00:00:00.000Z",
      "datePublic": "2018-04-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-13T08:13:02.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "RHSA-2018:1347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1347"
        },
        {
          "name": "RHSA-2018:1348",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1348"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "RHSA-2018:1354",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1354"
        },
        {
          "name": "1040806",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040806"
        },
        {
          "name": "RHSA-2018:1355",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1355"
        },
        {
          "name": "RHSA-2018:1345",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1345"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "name": "RHSA-2018:1374",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1374"
        },
        {
          "name": "[linux-kernel] 20180406 [PATCH 3.18 40/93] perf/hwbp: Simplify the perf-hwbp code, fix documentation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2018/4/6/813"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3641-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-2/"
        },
        {
          "name": "USN-3641-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-1/"
        },
        {
          "name": "openSUSE-SU-2020:0801",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2018-05-18T21:46:02.320084",
          "DATE_REQUESTED": "2018-04-17T08:55:55",
          "ID": "CVE-2018-1000199",
          "REQUESTER": "luto@kernel.org",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "RHSA-2018:1347",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1347"
            },
            {
              "name": "RHSA-2018:1348",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1348"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "RHSA-2018:1354",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1354"
            },
            {
              "name": "1040806",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040806"
            },
            {
              "name": "RHSA-2018:1355",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1355"
            },
            {
              "name": "RHSA-2018:1345",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1345"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "RHSA-2018:1374",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1374"
            },
            {
              "name": "[linux-kernel] 20180406 [PATCH 3.18 40/93] perf/hwbp: Simplify the perf-hwbp code, fix documentation",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2018/4/6/813"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3641-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-2/"
            },
            {
              "name": "USN-3641-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-1/"
            },
            {
              "name": "openSUSE-SU-2020:0801",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000199",
    "datePublished": "2018-05-24T13:00:00.000Z",
    "dateReserved": "2018-04-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T12:40:46.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-1068 (GCVE-0-2018-1068)

Vulnerability from cvelistv5 – Published: 2018-03-16 16:00 – Updated: 2024-09-16 16:13

Summary

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.

Severity

No CVSS data available.

CWE

CWE-119

Assigner

redhat redhat root

References

22 references

URL	Tags
https://www.debian.org/security/2018/dsa-4187	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3654-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3674-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3677-1/	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=1552048	x_refsource_CONFIRM
https://www.debian.org/security/2018/dsa-4188	vendor-advisoryx_refsource_DEBIAN
https://marc.info/?l=linux-netdev&m=152023808817590&w=2	mailing-listx_refsource_MLIST
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/b7181216…	x_refsource_CONFIRM
https://usn.ubuntu.com/3674-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:1355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/103459	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3677-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3654-2/	vendor-advisoryx_refsource_UBUNTU
https://marc.info/?l=linux-netdev&m=152025888924151&w=2	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3656-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4159	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Linux Kernel Organization, Inc.	Linux Kernel	Affected: 4.x

Date Public

2018-03-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:47.340Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3654-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-1/"
          },
          {
            "name": "USN-3674-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3674-1/"
          },
          {
            "name": "USN-3677-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552048"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "[linux-netdev] 20180305 BUG: unable to handle kernel paging request in compat_copy_entries",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linux-netdev\u0026m=152023808817590\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6"
          },
          {
            "name": "USN-3674-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3674-2/"
          },
          {
            "name": "RHSA-2018:1355",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1355"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "103459",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103459"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "name": "USN-3677-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-2/"
          },
          {
            "name": "USN-3654-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-2/"
          },
          {
            "name": "[linux-netdev] 20180305 [PATCH net] netfilter: check for out-of-bounds while copying compat entries",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linux-netdev\u0026m=152025888924151\u0026w=2"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3656-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3656-1/"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          },
          {
            "name": "RHSA-2019:4159",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4159"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Linux Kernel Organization, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ],
      "datePublic": "2018-03-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux 4.x kernel\u0027s implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-10T15:06:12.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3654-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-1/"
        },
        {
          "name": "USN-3674-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3674-1/"
        },
        {
          "name": "USN-3677-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552048"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "[linux-netdev] 20180305 BUG: unable to handle kernel paging request in compat_copy_entries",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://marc.info/?l=linux-netdev\u0026m=152023808817590\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6"
        },
        {
          "name": "USN-3674-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3674-2/"
        },
        {
          "name": "RHSA-2018:1355",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1355"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "103459",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103459"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "name": "USN-3677-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-2/"
        },
        {
          "name": "USN-3654-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-2/"
        },
        {
          "name": "[linux-netdev] 20180305 [PATCH net] netfilter: check for out-of-bounds while copying compat entries",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://marc.info/?l=linux-netdev\u0026m=152025888924151\u0026w=2"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3656-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3656-1/"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        },
        {
          "name": "RHSA-2019:4159",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4159"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2018-03-05T00:00:00",
          "ID": "CVE-2018-1068",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.x"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux Kernel Organization, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in the Linux 4.x kernel\u0027s implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3654-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-1/"
            },
            {
              "name": "USN-3674-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3674-1/"
            },
            {
              "name": "USN-3677-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3677-1/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1552048",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552048"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "[linux-netdev] 20180305 BUG: unable to handle kernel paging request in compat_copy_entries",
              "refsource": "MLIST",
              "url": "https://marc.info/?l=linux-netdev\u0026m=152023808817590\u0026w=2"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6"
            },
            {
              "name": "USN-3674-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3674-2/"
            },
            {
              "name": "RHSA-2018:1355",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1355"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "103459",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103459"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "USN-3677-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3677-2/"
            },
            {
              "name": "USN-3654-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-2/"
            },
            {
              "name": "[linux-netdev] 20180305 [PATCH net] netfilter: check for out-of-bounds while copying compat entries",
              "refsource": "MLIST",
              "url": "https://marc.info/?l=linux-netdev\u0026m=152025888924151\u0026w=2"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3656-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3656-1/"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            },
            {
              "name": "RHSA-2019:1190",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1190"
            },
            {
              "name": "RHSA-2019:4159",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4159"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1068",
    "datePublished": "2018-03-16T16:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:13:09.145Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-1087 (GCVE-0-2018-1087)

Vulnerability from cvelistv5 – Published: 2018-05-15 16:00 – Updated: 2024-08-05 03:51

Summary

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

Severity

8 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-250

Assigner

redhat redhat root

References

14 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:1347	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040862	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:1348	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4196	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:1355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1345	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/vulnerabilitie…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1524	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2018/05/08/5	x_refsource_MISC
http://www.securityfocus.com/bid/104127	vdb-entryx_refsource_BID
https://usn.ubuntu.com/3641-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3641-1/	vendor-advisoryx_refsource_UBUNTU

Impacted products

1 product

Vendor	Product	Version
kernel	KVM	Affected: kernel 4.16 Affected: kernel 4.16-rc7 Affected: kernel 4.17-rc1 Affected: kernel 4.17-rc2 Affected: kernel 4.17-rc3

Date Public

2018-05-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:1347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1347"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087"
          },
          {
            "name": "1040862",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040862"
          },
          {
            "name": "RHSA-2018:1348",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1348"
          },
          {
            "name": "DSA-4196",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4196"
          },
          {
            "name": "RHSA-2018:1355",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1355"
          },
          {
            "name": "RHSA-2018:1345",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1345"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/pop_ss"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "name": "RHSA-2018:1524",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1524"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2018/05/08/5"
          },
          {
            "name": "104127",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104127"
          },
          {
            "name": "USN-3641-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-2/"
          },
          {
            "name": "USN-3641-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "KVM",
          "vendor": "kernel",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 4.16"
            },
            {
              "status": "affected",
              "version": "kernel 4.16-rc7"
            },
            {
              "status": "affected",
              "version": "kernel 4.17-rc1"
            },
            {
              "status": "affected",
              "version": "kernel 4.17-rc2"
            },
            {
              "status": "affected",
              "version": "kernel 4.17-rc3"
            }
          ]
        }
      ],
      "datePublic": "2018-05-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel\u0027s KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-29T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:1347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1347"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087"
        },
        {
          "name": "1040862",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040862"
        },
        {
          "name": "RHSA-2018:1348",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1348"
        },
        {
          "name": "DSA-4196",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4196"
        },
        {
          "name": "RHSA-2018:1355",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1355"
        },
        {
          "name": "RHSA-2018:1345",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1345"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/pop_ss"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "name": "RHSA-2018:1524",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1524"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2018/05/08/5"
        },
        {
          "name": "104127",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104127"
        },
        {
          "name": "USN-3641-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-2/"
        },
        {
          "name": "USN-3641-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-1087",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "KVM",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "kernel 4.16"
                          },
                          {
                            "version_value": "kernel 4.16-rc7"
                          },
                          {
                            "version_value": "kernel 4.17-rc1"
                          },
                          {
                            "version_value": "kernel 4.17-rc2"
                          },
                          {
                            "version_value": "kernel 4.17-rc3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "kernel"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel\u0027s KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "8.0/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-250"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:1347",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1347"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087"
            },
            {
              "name": "1040862",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040862"
            },
            {
              "name": "RHSA-2018:1348",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1348"
            },
            {
              "name": "DSA-4196",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4196"
            },
            {
              "name": "RHSA-2018:1355",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1355"
            },
            {
              "name": "RHSA-2018:1345",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1345"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/pop_ss",
              "refsource": "MISC",
              "url": "https://access.redhat.com/security/vulnerabilities/pop_ss"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "RHSA-2018:1524",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1524"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2018/05/08/5",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2018/05/08/5"
            },
            {
              "name": "104127",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104127"
            },
            {
              "name": "USN-3641-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-2/"
            },
            {
              "name": "USN-3641-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1087",
    "datePublished": "2018-05-15T16:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T03:51:48.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-1091 (GCVE-0-2018-1091)

Vulnerability from cvelistv5 – Published: 2018-03-27 21:00 – Updated: 2024-08-05 03:51

Summary

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Severity

No CVSS data available.

CWE

CWE-391

Assigner

redhat redhat root

References

8 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1558149	x_refsource_CONFIRM
https://www.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_CONFIRM
https://marc.info/?l=linuxppc-embedded&m=15053553…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/cve-2018-1091	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/c1fa0768…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2018/03/27/4	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Linux kernel v4.13 and newer	Affected: Linux kernel v4.13 and newer

Date Public

2018-03-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.251Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558149"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linuxppc-embedded\u0026m=150535531910494\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2018-1091"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/03/27/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel v4.13 and newer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel v4.13 and newer"
            }
          ]
        }
      ],
      "datePublic": "2018-03-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-391",
              "description": "CWE-391",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-09T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558149"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://marc.info/?l=linuxppc-embedded\u0026m=150535531910494\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/cve/cve-2018-1091"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/03/27/4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-1091",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux kernel v4.13 and newer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Linux kernel v4.13 and newer"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-391"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1558149",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558149"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5",
              "refsource": "CONFIRM",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5"
            },
            {
              "name": "https://marc.info/?l=linuxppc-embedded\u0026m=150535531910494\u0026w=2",
              "refsource": "CONFIRM",
              "url": "https://marc.info/?l=linuxppc-embedded\u0026m=150535531910494\u0026w=2"
            },
            {
              "name": "https://access.redhat.com/security/cve/cve-2018-1091",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/cve/cve-2018-1091"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2018/03/27/4",
              "refsource": "CONFIRM",
              "url": "http://openwall.com/lists/oss-security/2018/03/27/4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1091",
    "datePublished": "2018-03-27T21:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T03:51:48.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-8897 (GCVE-0-2018-8897)

Vulnerability from cvelistv5 – Published: 2018-05-08 18:00 – Updated: 2024-08-05 07:10

Summary

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

48 references

URL	Tags
https://github.com/torvalds/linux/commit/d8ba61ba…	x_refsource_MISC
http://openwall.com/lists/oss-security/2018/05/08/4	x_refsource_MISC
http://www.securitytracker.com/id/1040849	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/104071	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:1350	vendor-advisoryx_refsource_REDHAT
https://support.citrix.com/article/CTX234679	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1347	vendor-advisoryx_refsource_REDHAT
https://www.exploit-db.com/exploits/44697/	exploitx_refsource_EXPLOIT-DB
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1040866	vdb-entryx_refsource_SECTRACK
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://support.apple.com/HT208742	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1346	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1348	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1354	vendor-advisoryx_refsource_REDHAT
https://svnweb.freebsd.org/base?view=revision&rev…	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4196	vendor-advisoryx_refsource_DEBIAN
https://www.freebsd.org/security/advisories/FreeB…	x_refsource_MISC
http://www.securitytracker.com/id/1040744	vdb-entryx_refsource_SECTRACK
https://www.triplefault.io/2018/05/spurious-db-ex…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1351	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1567074	x_refsource_MISC
https://xenbits.xen.org/xsa/advisory-260.html	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1319	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4201	vendor-advisoryx_refsource_DEBIAN
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1355	vendor-advisoryx_refsource_REDHAT
https://security.netapp.com/advisory/ntap-2018092…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1345	vendor-advisoryx_refsource_REDHAT
https://www.exploit-db.com/exploits/45024/	exploitx_refsource_EXPLOIT-DB
https://access.redhat.com/errata/RHSA-2018:1349	vendor-advisoryx_refsource_REDHAT
https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:1352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:1318	vendor-advisoryx_refsource_REDHAT
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://patchwork.kernel.org/patch/10386677/	x_refsource_MISC
https://www.kb.cert.org/vuls/id/631579	third-party-advisoryx_refsource_CERT-VN
https://github.com/can1357/CVE-2018-8897/	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:1524	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2018/05/08/1	x_refsource_MISC
http://www.securitytracker.com/id/1040861	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:1353	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3641-2/	vendor-advisoryx_refsource_UBUNTU
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040882	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3641-1/	vendor-advisoryx_refsource_UBUNTU
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM

Date Public

2018-05-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:10:46.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/05/08/4"
          },
          {
            "name": "1040849",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040849"
          },
          {
            "name": "104071",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104071"
          },
          {
            "name": "RHSA-2018:1350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1350"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX234679"
          },
          {
            "name": "RHSA-2018:1347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1347"
          },
          {
            "name": "44697",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44697/"
          },
          {
            "name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
          },
          {
            "name": "1040866",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040866"
          },
          {
            "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
          },
          {
            "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT208742"
          },
          {
            "name": "RHSA-2018:1346",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1346"
          },
          {
            "name": "RHSA-2018:1348",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1348"
          },
          {
            "name": "RHSA-2018:1354",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1354"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=333368"
          },
          {
            "name": "DSA-4196",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4196"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
          },
          {
            "name": "1040744",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040744"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
          },
          {
            "name": "RHSA-2018:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1351"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-260.html"
          },
          {
            "name": "RHSA-2018:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1319"
          },
          {
            "name": "DSA-4201",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4201"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "RHSA-2018:1355",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1355"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
          },
          {
            "name": "RHSA-2018:1345",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1345"
          },
          {
            "name": "45024",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45024/"
          },
          {
            "name": "RHSA-2018:1349",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1349"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
          },
          {
            "name": "RHSA-2018:1352",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1352"
          },
          {
            "name": "RHSA-2018:1318",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1318"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/10386677/"
          },
          {
            "name": "VU#631579",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/631579"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/can1357/CVE-2018-8897/"
          },
          {
            "name": "RHSA-2018:1524",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1524"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/05/08/1"
          },
          {
            "name": "1040861",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040861"
          },
          {
            "name": "RHSA-2018:1353",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1353"
          },
          {
            "name": "USN-3641-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_21"
          },
          {
            "name": "1040882",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040882"
          },
          {
            "name": "USN-3641-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3641-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer\u0027s Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u003c 3, the debug exception is delivered after the transfer to CPL \u003c 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-21T08:06:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/05/08/4"
        },
        {
          "name": "1040849",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040849"
        },
        {
          "name": "104071",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104071"
        },
        {
          "name": "RHSA-2018:1350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1350"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX234679"
        },
        {
          "name": "RHSA-2018:1347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1347"
        },
        {
          "name": "44697",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44697/"
        },
        {
          "name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
        },
        {
          "name": "1040866",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040866"
        },
        {
          "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
        },
        {
          "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT208742"
        },
        {
          "name": "RHSA-2018:1346",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1346"
        },
        {
          "name": "RHSA-2018:1348",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1348"
        },
        {
          "name": "RHSA-2018:1354",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1354"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=333368"
        },
        {
          "name": "DSA-4196",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4196"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
        },
        {
          "name": "1040744",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040744"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
        },
        {
          "name": "RHSA-2018:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1351"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-260.html"
        },
        {
          "name": "RHSA-2018:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1319"
        },
        {
          "name": "DSA-4201",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4201"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "RHSA-2018:1355",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1355"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
        },
        {
          "name": "RHSA-2018:1345",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1345"
        },
        {
          "name": "45024",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45024/"
        },
        {
          "name": "RHSA-2018:1349",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1349"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
        },
        {
          "name": "RHSA-2018:1352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1352"
        },
        {
          "name": "RHSA-2018:1318",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1318"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://patchwork.kernel.org/patch/10386677/"
        },
        {
          "name": "VU#631579",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/631579"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/can1357/CVE-2018-8897/"
        },
        {
          "name": "RHSA-2018:1524",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1524"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/05/08/1"
        },
        {
          "name": "1040861",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040861"
        },
        {
          "name": "RHSA-2018:1353",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1353"
        },
        {
          "name": "USN-3641-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_21"
        },
        {
          "name": "1040882",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040882"
        },
        {
          "name": "USN-3641-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3641-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-8897",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer\u0027s Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u003c 3, the debug exception is delivered after the transfer to CPL \u003c 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2018/05/08/4",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2018/05/08/4"
            },
            {
              "name": "1040849",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040849"
            },
            {
              "name": "104071",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104071"
            },
            {
              "name": "RHSA-2018:1350",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1350"
            },
            {
              "name": "https://support.citrix.com/article/CTX234679",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX234679"
            },
            {
              "name": "RHSA-2018:1347",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1347"
            },
            {
              "name": "44697",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44697/"
            },
            {
              "name": "[debian-lts-announce] 20180525 [SECURITY] [DLA 1383-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html"
            },
            {
              "name": "1040866",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040866"
            },
            {
              "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1577-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html"
            },
            {
              "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
            },
            {
              "name": "https://support.apple.com/HT208742",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT208742"
            },
            {
              "name": "RHSA-2018:1346",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1346"
            },
            {
              "name": "RHSA-2018:1348",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1348"
            },
            {
              "name": "RHSA-2018:1354",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1354"
            },
            {
              "name": "https://svnweb.freebsd.org/base?view=revision\u0026revision=333368",
              "refsource": "MISC",
              "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=333368"
            },
            {
              "name": "DSA-4196",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4196"
            },
            {
              "name": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc",
              "refsource": "MISC",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc"
            },
            {
              "name": "1040744",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040744"
            },
            {
              "name": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html",
              "refsource": "MISC",
              "url": "https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html"
            },
            {
              "name": "RHSA-2018:1351",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1351"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567074"
            },
            {
              "name": "https://xenbits.xen.org/xsa/advisory-260.html",
              "refsource": "MISC",
              "url": "https://xenbits.xen.org/xsa/advisory-260.html"
            },
            {
              "name": "RHSA-2018:1319",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1319"
            },
            {
              "name": "DSA-4201",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4201"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "RHSA-2018:1355",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1355"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180927-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180927-0002/"
            },
            {
              "name": "RHSA-2018:1345",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1345"
            },
            {
              "name": "45024",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45024/"
            },
            {
              "name": "RHSA-2018:1349",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1349"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8897"
            },
            {
              "name": "RHSA-2018:1352",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1352"
            },
            {
              "name": "RHSA-2018:1318",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1318"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9"
            },
            {
              "name": "https://patchwork.kernel.org/patch/10386677/",
              "refsource": "MISC",
              "url": "https://patchwork.kernel.org/patch/10386677/"
            },
            {
              "name": "VU#631579",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/631579"
            },
            {
              "name": "https://github.com/can1357/CVE-2018-8897/",
              "refsource": "MISC",
              "url": "https://github.com/can1357/CVE-2018-8897/"
            },
            {
              "name": "RHSA-2018:1524",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1524"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2018/05/08/1",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2018/05/08/1"
            },
            {
              "name": "1040861",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040861"
            },
            {
              "name": "RHSA-2018:1353",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1353"
            },
            {
              "name": "USN-3641-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-2/"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_21",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_21"
            },
            {
              "name": "1040882",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040882"
            },
            {
              "name": "USN-3641-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3641-1/"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-8897",
    "datePublished": "2018-05-08T18:00:00.000Z",
    "dateReserved": "2018-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:10:46.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2018:1318

CVE-2017-16939 (GCVE-0-2017-16939)

CVE-2018-1000199 (GCVE-0-2018-1000199)

CVE-2018-1068 (GCVE-0-2018-1068)

CVE-2018-1087 (GCVE-0-2018-1087)

CVE-2018-1091 (GCVE-0-2018-1091)

CVE-2018-8897 (GCVE-0-2018-8897)

Tags

Sightings

Nomenclature

Related by attack behaviour