csaf_redhat - rhsa-2018

rhsa-2018_3096

Vulnerability from csaf_redhat

Published

2018-10-30 12:31

Modified

2024-11-05 20:48

Summary

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Notes

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391) * kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c (CVE-2017-18344) * kernel: Integer overflow in udl_fb_mmap() can allow attackers to execute code in kernel space (CVE-2018-8781) * kernel: MIDI driver race condition leads to a double-free (CVE-2018-10902) * kernel: Missing check in inode_init_owner() does not clear SGID bit on non-directories for non-members (CVE-2018-13405) * kernel: AIO write triggers integer overflow in some protocols (CVE-2015-8830) * kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation (CVE-2017-0861) * kernel: Handling of might_cancel queueing is not properly pretected against race (CVE-2017-10661) * kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial of service (CVE-2017-17805) * kernel: Inifinite loop vulnerability in madvise_willneed() function allows local denial of service (CVE-2017-18208) * kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service (CVE-2018-1120) * kernel: a null pointer dereference in dccp_write_xmit() leads to a system crash (CVE-2018-1130) * kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial of service (CVE-2018-5344) * kernel: Missing length check of payload in _sctp_make_chunk() function allows denial of service (CVE-2018-5803) * kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption (CVE-2018-5848) * kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image (CVE-2018-10878) * kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet (CVE-2018-1000026) * kernel: Information leak when handling NM entries containing NUL (CVE-2016-4913) * kernel: Mishandling mutex within libsas allowing local Denial of Service (CVE-2017-18232) * kernel: NULL pointer dereference in ext4_process_freed_data() when mounting crafted ext4 image (CVE-2018-1092) * kernel: NULL pointer dereference in ext4_xattr_inode_hash() causes crash with crafted ext4 image (CVE-2018-1094) * kernel: vhost: Information disclosure in vhost.c:vhost_new_msg() (CVE-2018-1118) * kernel: Denial of service in resv_map_release function in mm/hugetlb.c (CVE-2018-7740) * kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c (CVE-2018-7757) * kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service (CVE-2018-10322) * kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file (CVE-2018-10879) * kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image (CVE-2018-10881) * kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function (CVE-2018-10883) * kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c (CVE-2018-10940) Red Hat would like to thank Juha-Matti Tilli (Aalto University - Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5391; Trend Micro Zero Day Initiative for reporting CVE-2018-10902; Qualys Research Labs for reporting CVE-2018-1120; Evgenii Shatokhin (Virtuozzo Team) for reporting CVE-2018-1130; and Wen Xu for reporting CVE-2018-1092 and CVE-2018-1094.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391)\n\n* kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c (CVE-2017-18344)\n\n* kernel: Integer overflow in udl_fb_mmap() can allow attackers to execute code in kernel space (CVE-2018-8781)\n\n* kernel: MIDI driver race condition leads to a double-free (CVE-2018-10902)\n\n* kernel: Missing check in inode_init_owner() does not clear SGID bit on non-directories for non-members (CVE-2018-13405)\n\n* kernel: AIO write triggers integer overflow in some protocols (CVE-2015-8830)\n\n* kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation (CVE-2017-0861)\n\n* kernel: Handling of might_cancel queueing is not properly pretected against race (CVE-2017-10661)\n\n* kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial of service (CVE-2017-17805)\n\n* kernel: Inifinite loop vulnerability in madvise_willneed() function allows local denial of service (CVE-2017-18208)\n\n* kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service (CVE-2018-1120)\n\n* kernel: a null pointer dereference in dccp_write_xmit() leads to a system crash (CVE-2018-1130)\n\n* kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial of service (CVE-2018-5344)\n\n* kernel: Missing length check of payload in _sctp_make_chunk() function allows denial of service (CVE-2018-5803)\n\n* kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption (CVE-2018-5848)\n\n* kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image (CVE-2018-10878)\n\n* kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet (CVE-2018-1000026)\n\n* kernel: Information leak when handling NM entries containing NUL (CVE-2016-4913)\n\n* kernel: Mishandling mutex within libsas allowing local Denial of Service (CVE-2017-18232)\n\n* kernel: NULL pointer dereference in ext4_process_freed_data() when mounting crafted ext4 image (CVE-2018-1092)\n\n* kernel: NULL pointer dereference in ext4_xattr_inode_hash() causes crash with crafted ext4 image (CVE-2018-1094)\n\n* kernel: vhost: Information disclosure in vhost.c:vhost_new_msg() (CVE-2018-1118)\n\n* kernel: Denial of service in resv_map_release function in mm/hugetlb.c (CVE-2018-7740)\n\n* kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c (CVE-2018-7757)\n\n* kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service (CVE-2018-10322)\n\n* kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file (CVE-2018-10879)\n\n* kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image (CVE-2018-10881)\n\n* kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function (CVE-2018-10883)\n\n* kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c (CVE-2018-10940)\n\nRed Hat would like to thank Juha-Matti Tilli (Aalto University - Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5391; Trend Micro Zero Day Initiative for reporting CVE-2018-10902; Qualys Research Labs for reporting CVE-2018-1120; Evgenii Shatokhin (Virtuozzo Team) for reporting CVE-2018-1130; and Wen Xu for reporting CVE-2018-1092 and CVE-2018-1094.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2018:3096",
        "url": "https://access.redhat.com/errata/RHSA-2018:3096"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/3553061",
        "url": "https://access.redhat.com/articles/3553061"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.6_Release_Notes/index.html",
        "url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.6_Release_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "1314275",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275"
      },
      {
        "category": "external",
        "summary": "1337528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528"
      },
      {
        "category": "external",
        "summary": "1481136",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136"
      },
      {
        "category": "external",
        "summary": "1510602",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1510602"
      },
      {
        "category": "external",
        "summary": "1512875",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1512875"
      },
      {
        "category": "external",
        "summary": "1528312",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528312"
      },
      {
        "category": "external",
        "summary": "1533909",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533909"
      },
      {
        "category": "external",
        "summary": "1541846",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1541846"
      },
      {
        "category": "external",
        "summary": "1551051",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551051"
      },
      {
        "category": "external",
        "summary": "1551565",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551565"
      },
      {
        "category": "external",
        "summary": "1552867",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552867"
      },
      {
        "category": "external",
        "summary": "1553351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553351"
      },
      {
        "category": "external",
        "summary": "1553361",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553361"
      },
      {
        "category": "external",
        "summary": "1558066",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558066"
      },
      {
        "category": "external",
        "summary": "1560777",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560777"
      },
      {
        "category": "external",
        "summary": "1560788",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560788"
      },
      {
        "category": "external",
        "summary": "1563994",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1563994"
      },
      {
        "category": "external",
        "summary": "1569910",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1569910"
      },
      {
        "category": "external",
        "summary": "1571062",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571062"
      },
      {
        "category": "external",
        "summary": "1571623",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571623"
      },
      {
        "category": "external",
        "summary": "1573699",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573699"
      },
      {
        "category": "external",
        "summary": "1575472",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1575472"
      },
      {
        "category": "external",
        "summary": "1576419",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1576419"
      },
      {
        "category": "external",
        "summary": "1577408",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1577408"
      },
      {
        "category": "external",
        "summary": "1590720",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590720"
      },
      {
        "category": "external",
        "summary": "1590799",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590799"
      },
      {
        "category": "external",
        "summary": "1596802",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596802"
      },
      {
        "category": "external",
        "summary": "1596806",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596806"
      },
      {
        "category": "external",
        "summary": "1596828",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596828"
      },
      {
        "category": "external",
        "summary": "1596846",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596846"
      },
      {
        "category": "external",
        "summary": "1599161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599161"
      },
      {
        "category": "external",
        "summary": "1608672",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1608672"
      },
      {
        "category": "external",
        "summary": "1609664",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609664"
      },
      {
        "category": "external",
        "summary": "1610958",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1610958"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3096.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-05T20:48:46+00:00",
      "generator": {
        "date": "2024-11-05T20:48:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2018:3096",
      "initial_release_date": "2018-10-30T12:31:39+00:00",
      "revision_history": [
        {
          "date": "2018-10-30T12:31:39+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2018-10-30T12:31:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T20:48:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
                  "product_id": "7Server-NFV-7.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras_rt:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                  "product_id": "7Server-RT-7.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras_rt:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-kvm-debuginfo@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.0-957.rt56.910.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
                  "product_id": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.0-957.rt56.910.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.src",
                "product": {
                  "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.src",
                  "product_id": "kernel-rt-0:3.10.0-957.rt56.910.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-957.rt56.910.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.src as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src"
        },
        "product_reference": "kernel-rt-0:3.10.0-957.rt56.910.el7.src",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time for NFV (v. 7)",
          "product_id": "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-NFV-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src"
        },
        "product_reference": "kernel-rt-0:3.10.0-957.rt56.910.el7.src",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
        "relates_to_product_reference": "7Server-RT-7.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8830",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2016-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1314275"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: AIO write triggers integer overflow in some protocols",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, as the related AIO vector code is not present in this product.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7. Future Linux kernel updates for the respective releases might address this issue.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. This flaw is not currently planned to be addressed in future updates due to MRG-2 being an EUS release. For additional information, refer to the Extended Update Support (EUS) Guide: https://access.redhat.com/articles/rhel-eus.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-8830"
        },
        {
          "category": "external",
          "summary": "RHBZ#1314275",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-8830",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-8830"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8830",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8830"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/oss-sec/2016/q2/479",
          "url": "http://seclists.org/oss-sec/2016/q2/479"
        },
        {
          "category": "external",
          "summary": "https://bugs.chromium.org/p/project-zero/issues/detail?id=735",
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=735"
        }
      ],
      "release_date": "2015-03-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: AIO write triggers integer overflow in some protocols"
    },
    {
      "cve": "CVE-2016-4913",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2016-05-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1337528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation (i.e. the directory entry name being encoded by a bunch of NM entries).  The process stops when the amount collected so far + the claimed amount in the current NM entry exceed 254. However, the value returned as the total length is the sum of *claimed* sizes, not the actual amount collected. And that\u0027s what will be passed to readdir() callback as the name length - 8Kb __copy_to_user() from a buffer allocated by __get_free_page().",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Information leak when handling NM entries containing NUL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 and MRG-2. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7. Future Linux kernel updates for the respective releases might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-4913"
        },
        {
          "category": "external",
          "summary": "RHBZ#1337528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-4913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-4913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4913"
        }
      ],
      "release_date": "2016-05-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Information leak when handling NM entries containing NUL"
    },
    {
      "cve": "CVE-2017-0861",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2017-11-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1563994"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the snd_pcm_info() function in the ALSA subsystem in the Linux kernel allows attackers to induce a kernel memory corruption and possibly crash or lock up a system. Due to the nature of the flaw, a privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-0861"
        },
        {
          "category": "external",
          "summary": "RHBZ#1563994",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1563994"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-0861",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-0861"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-0861",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0861"
        }
      ],
      "release_date": "2017-12-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation"
    },
    {
      "cve": "CVE-2017-10661",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2017-08-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1481136"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in the Linux kernel before version 4.11-rc1 in \u0027fs/timerfd.c\u0027 file which allows a local user to cause a kernel list corruption or use-after-free via simultaneous operations with a file descriptor which leverage improper \u0027might_cancel\u0027 queuing.  An unprivileged local user could use this flaw to cause a denial of service of the system. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Handling of might_cancel queueing is not properly pretected against race",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.\n\nThis issue affects Red Hat Enterprise Linux 6 and 7. Future updates for the respective releases may address this issue.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. This flaw is not currently planned to be addressed in future updates due to MRG-2 being an EUS release. For additional information, refer to the Extended Update Support (EUS) Guide: https://access.redhat.com/articles/rhel-eus.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-10661"
        },
        {
          "category": "external",
          "summary": "RHBZ#1481136",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10661",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-10661"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10661",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10661"
        }
      ],
      "release_date": "2017-02-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Handling of might_cancel queueing is not properly pretected against race"
    },
    {
      "cve": "CVE-2017-17805",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2017-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1528312"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Salsa20 encryption algorithm in the Linux kernel, before 4.14.8, does not correctly handle zero-length inputs. This allows a local attacker the ability to use the AF_ALG-based skcipher interface to cause a denial of service (uninitialized-memory free and kernel crash) or have an unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 are vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64, and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-17805"
        },
        {
          "category": "external",
          "summary": "RHBZ#1528312",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528312"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-17805",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-17805"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-17805",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17805"
        }
      ],
      "release_date": "2017-11-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service"
    },
    {
      "cve": "CVE-2017-18208",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2018-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1551565"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The madvise_willneed function in the Linux kernel allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18208"
        },
        {
          "category": "external",
          "summary": "RHBZ#1551565",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551565"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18208",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18208"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18208",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18208"
        },
        {
          "category": "external",
          "summary": "https://lwn.net/Articles/618064/",
          "url": "https://lwn.net/Articles/618064/"
        },
        {
          "category": "external",
          "summary": "https://www.kernel.org/doc/Documentation/filesystems/dax.txt",
          "url": "https://www.kernel.org/doc/Documentation/filesystems/dax.txt"
        }
      ],
      "release_date": "2017-11-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service"
    },
    {
      "cve": "CVE-2017-18232",
      "cwe": {
        "id": "CWE-833",
        "name": "Deadlock"
      },
      "discovery_date": "2018-03-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1558066"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Serial Attached SCSI (SAS) implementation in the Linux kernel mishandles a mutex within libsas. This allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Mishandling mutex within libsas allowing local Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18232"
        },
        {
          "category": "external",
          "summary": "RHBZ#1558066",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558066"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18232",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18232"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18232",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18232"
        }
      ],
      "release_date": "2017-12-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Mishandling mutex within libsas allowing local Denial of Service"
    },
    {
      "cve": "CVE-2017-18344",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2018-07-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1610958"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn\u0027t properly validate the sigevent-\u003esigev_notify field, which leads to out-of-bounds access in the show_timer function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18344"
        },
        {
          "category": "external",
          "summary": "RHBZ#1610958",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1610958"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18344",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18344"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18344",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18344"
        }
      ],
      "release_date": "2017-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "category": "workaround",
          "details": "Attached to this bugzilla is a systemtap script that will prevent opening (and therefore reading) the /proc/\u003cprocess\u003e/timers file which is used to leak information.\n\nThe SystemTap script is relatively small and efficient, broken into 3 distinct sections as follows:\n\n--------\n\nprobe kernel.function(\"proc_timers_open@fs/proc/base.c\").return { \n        // this is -EACCES\n\t$return = -13;\n        message = sprintf(\"CVE-2017-18344 mitigation denied access to %s to %s(%d)\", file_name , execname(), pid());\n        // print a warning message at KERN_INFO debug level\n        printk(6, message);\n}\n\nprobe begin {\n        printk(6, \"Mitigation for CVE-2017-18344 loaded.\\n\");\n}\n\n\nprobe end {\n        printk(6, \"Mitigation for CVE-2017-18344 unloaded.\\n\");\n}\n\n\n---------\n\nFirst, the script places a probe at the return of the kernel function \u201cproc_timers_open\u201d when called.   This modifies the return value to be EACCES which would return this value to userspace preventing this file from being opened.  When the /proc/\u003cpid\u003e/timer file is attempted to be opened, a message will be logged to the kernel log subsystem showing the process and pid of the application attempting to access the timer file.  \n\nThis file is not in widespread use at this time, although some applications may read from it to debug or understand their own timers that are set.  This mitigation will not be useful in this context.\n\nFinally, the \u201cprobe begin\u201d and \u201cprobe end\u201d code blocks tell systemtap to add the supplied text to the kernel log buffer via the printk function. This creates an audit trail by registering in the system logs exactly when the mitigation is loaded and unloaded.  This will need to be compiled with guru mode (-g parameter) to compile.\n\nThis will need to be loaded at each boot to remain effective.  Red Hat Product security recommends updating to a patched kernel when it is available.\n\nRed Hat always seeks to provide both mitigations to disable attacks as well as the actual patches to treat the flaw. To learn more about SystemTap, and how it can be used in your management of your Red Hat systems, please refer to Using SystemTap[1] or one of our videos about it within our Customer Portal[2].\n\n1 - https://access.redhat.com/articles/17839\n2 - https://access.redhat.com/search/#/?q=systemtap",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c"
    },
    {
      "cve": "CVE-2017-18360",
      "cwe": {
        "id": "CWE-369",
        "name": "Divide By Zero"
      },
      "discovery_date": "2019-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1671343"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A division-by-zero in set_termios(), when debugging is enabled, was found in the Linux kernel. When the [io_ti] driver is loaded, a local unprivileged attacker can request incorrect high transfer speed in the change_port_settings() in the drivers/usb/serial/io_ti.c so that the divisor value becomes zero and causes a system crash resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-18360"
        },
        {
          "category": "external",
          "summary": "RHBZ#1671343",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1671343"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-18360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18360"
        }
      ],
      "release_date": "2017-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Wen Xu"
          ]
        }
      ],
      "cve": "CVE-2018-1092",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2018-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1560777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/mballoc.c:ext4_process_freed_data() function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted ext4 image to cause a kernel panic.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1092"
        },
        {
          "category": "external",
          "summary": "RHBZ#1560777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1092",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1092"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1092",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1092"
        }
      ],
      "release_date": "2018-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Wen Xu"
          ]
        }
      ],
      "cve": "CVE-2018-1094",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2018-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1560788"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/xattr.c:ext4_xattr_inode_hash() function. An attacker could trick a legitimate user or a privileged attacker could exploit this to cause a NULL pointer dereference with a crafted ext4 image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1094"
        },
        {
          "category": "external",
          "summary": "RHBZ#1560788",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560788"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1094",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1094"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1094",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1094"
        }
      ],
      "release_date": "2018-03-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image"
    },
    {
      "cve": "CVE-2018-1118",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-05-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1573699"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Linux kernel does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1118"
        },
        {
          "category": "external",
          "summary": "RHBZ#1573699",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1573699"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1118"
        }
      ],
      "release_date": "2018-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Qualys Research Labs"
          ]
        }
      ],
      "cve": "CVE-2018-1120",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2018-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1575472"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "By mmap()ing a FUSE-backed file onto a process\u0027s memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/\u003cpid\u003e/cmdline (or /proc/\u003cpid\u003e/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1120"
        },
        {
          "category": "external",
          "summary": "RHBZ#1575472",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1575472"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1120",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1120"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1120",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1120"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/oss-sec/2018/q2/122",
          "url": "http://seclists.org/oss-sec/2018/q2/122"
        }
      ],
      "release_date": "2018-05-17T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: fuse-backed file mmap-ed onto process cmdline arguments causes denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Evgenii Shatokhin"
          ],
          "organization": "Virtuozzo Team"
        }
      ],
      "cve": "CVE-2018-1130",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2018-04-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1576419"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in the Linux kernel allows a local user to cause a denial of service by a number of certain crafted system calls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1130"
        },
        {
          "category": "external",
          "summary": "RHBZ#1576419",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1576419"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1130",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1130"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1130",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1130"
        }
      ],
      "release_date": "2018-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: a null pointer dereference in net/dccp/output.c:dccp_write_xmit() leads to a system crash"
    },
    {
      "cve": "CVE-2018-5344",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2018-01-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1533909"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s handling of loopback devices. An attacker, who has permissions to setup loopback disks, may create a denial of service or other unspecified actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2.\n\nFuture Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5344"
        },
        {
          "category": "external",
          "summary": "RHBZ#1533909",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533909"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5344",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5344"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5344",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5344"
        }
      ],
      "release_date": "2018-01-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Juha-Matti Tilli"
          ],
          "organization": "Aalto University - Department of Communications and Networking and Nokia Bell Labs"
        }
      ],
      "cve": "CVE-2018-5391",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-07-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1609664"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/articles/3553061\n\nThis issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64, and Red Hat Enterprise Linux 7 for Power 9. Future kernel updates for the respective releases will address this issue.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, but to a lesser degree. As such, the issue severity for RHEL5 is considered Moderate. This is not currently planned to be addressed in future updates of the product due to its life cycle and the issue severity. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5391"
        },
        {
          "category": "external",
          "summary": "RHBZ#1609664",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609664"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5391",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5391"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5391",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5391"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/articles/3553061",
          "url": "https://access.redhat.com/articles/3553061"
        },
        {
          "category": "external",
          "summary": "https://www.kb.cert.org/vuls/id/641765",
          "url": "https://www.kb.cert.org/vuls/id/641765"
        }
      ],
      "release_date": "2018-08-14T16:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "category": "workaround",
          "details": "One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment.\n\nThere can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets.\n\nSee the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)"
    },
    {
      "cve": "CVE-2018-5803",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1551051"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An error in the \"_sctp_make_chunk()\" function (net/sctp/sm_make_chunk.c) when handling SCTP, packet length can be exploited by a malicious local user to cause a kernel crash and a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5803"
        },
        {
          "category": "external",
          "summary": "RHBZ#1551051",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551051"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5803",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5803"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5803",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5803"
        }
      ],
      "release_date": "2018-02-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service"
    },
    {
      "cve": "CVE-2018-5848",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-05-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1590799"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In the function wmi_set_ie() in the Linux kernel the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the \u2018ie_len\u2019 argument can cause a buffer overflow and thus a memory corruption leading to a system crash or other or unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5848"
        },
        {
          "category": "external",
          "summary": "RHBZ#1590799",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590799"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5848",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5848"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5848",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5848"
        }
      ],
      "release_date": "2017-12-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption"
    },
    {
      "cve": "CVE-2018-7740",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2018-03-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1552867"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The resv_map_release function in mm/hugetlb.c in the Linux kernel, through 4.15.7, allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Denial of service in resv_map_release function in mm/hugetlb.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-7740"
        },
        {
          "category": "external",
          "summary": "RHBZ#1552867",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552867"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-7740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-7740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7740"
        }
      ],
      "release_date": "2018-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Denial of service in resv_map_release function in mm/hugetlb.c"
    },
    {
      "cve": "CVE-2018-7757",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-03-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1553361"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel allows local users to cause a denial of service (kernel memory exhaustion) via multiple read accesses to files in the /sys/class/sas_phy directory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-7757"
        },
        {
          "category": "external",
          "summary": "RHBZ#1553361",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553361"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-7757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-7757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-7757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7757"
        }
      ],
      "release_date": "2018-03-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c"
    },
    {
      "cve": "CVE-2018-8781",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2018-04-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1571062"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-8781"
        },
        {
          "category": "external",
          "summary": "RHBZ#1571062",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571062"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-8781",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-8781"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-8781",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8781"
        }
      ],
      "release_date": "2018-03-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space"
    },
    {
      "cve": "CVE-2018-10322",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2018-04-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1571623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel can cause a NULL pointer dereference in xfs_ilock_attr_map_shared function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted xfs filesystem image to cause a kernel panic and thus a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10322"
        },
        {
          "category": "external",
          "summary": "RHBZ#1571623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10322",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10322"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10322",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10322"
        }
      ],
      "release_date": "2018-04-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service"
    },
    {
      "cve": "CVE-2018-10878",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2018-06-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1596802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10878"
        },
        {
          "category": "external",
          "summary": "RHBZ#1596802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596802"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10878"
        }
      ],
      "release_date": "2018-05-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image"
    },
    {
      "cve": "CVE-2018-10879",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2018-06-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1596806"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10879"
        },
        {
          "category": "external",
          "summary": "RHBZ#1596806",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596806"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10879",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10879"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10879",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10879"
        }
      ],
      "release_date": "2018-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file"
    },
    {
      "cve": "CVE-2018-10881",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2018-06-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1596828"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10881"
        },
        {
          "category": "external",
          "summary": "RHBZ#1596828",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596828"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10881",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10881"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10881",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10881"
        }
      ],
      "release_date": "2018-06-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: out-of-bound access in ext4_get_group_info() when mounting and operating a crafted ext4 image"
    },
    {
      "cve": "CVE-2018-10883",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2018-06-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1596846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bound write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10883"
        },
        {
          "category": "external",
          "summary": "RHBZ#1596846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1596846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10883",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10883"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10883",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10883"
        }
      ],
      "release_date": "2018-06-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: stack-out-of-bounds write in jbd2_journal_dirty_metadata function"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Trend Micro Zero Day Initiative"
          ]
        }
      ],
      "cve": "CVE-2018-10902",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2018-06-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1590720"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: MIDI driver race condition leads to a double-free",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects all current shipping releases of Red Hat Enterprise Linux. This flaw requires real or emulated midi hardware available in the system. Fixes will be delivered when available.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10902"
        },
        {
          "category": "external",
          "summary": "RHBZ#1590720",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590720"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10902",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10902"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10902",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10902"
        }
      ],
      "release_date": "2018-08-21T03:28:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: MIDI driver race condition leads to a double-free"
    },
    {
      "cve": "CVE-2018-10940",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2018-05-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1577408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel, before 4.16.6 where the cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-10940"
        },
        {
          "category": "external",
          "summary": "RHBZ#1577408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1577408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10940",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-10940"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10940",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10940"
        }
      ],
      "release_date": "2018-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c"
    },
    {
      "cve": "CVE-2018-13405",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2018-07-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1599161"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-13405"
        },
        {
          "category": "external",
          "summary": "RHBZ#1599161",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1599161"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-13405",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-13405"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-13405",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-13405"
        }
      ],
      "release_date": "2018-07-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members"
    },
    {
      "cve": "CVE-2018-18690",
      "cwe": {
        "id": "CWE-391",
        "name": "Unchecked Error Condition"
      },
      "discovery_date": "2018-10-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1643988"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-18690"
        },
        {
          "category": "external",
          "summary": "RHBZ#1643988",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643988"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-18690",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-18690"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18690",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18690"
        }
      ],
      "release_date": "2018-03-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change"
    },
    {
      "cve": "CVE-2018-1000026",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-02-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1541846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper validation in the bnx2x network card driver of the Linux kernel version 4.15 can allow for denial of service (DoS) attacks via a packet with a gso_size larger than ~9700 bytes. Untrusted guest VMs can exploit this vulnerability in the host machine, causing a crash in the network card.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6, as supported configurations are not affected.\n\nThis issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
          "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
          "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
          "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-1000026"
        },
        {
          "category": "external",
          "summary": "RHBZ#1541846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1541846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000026",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000026"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000026",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000026"
        }
      ],
      "release_date": "2018-01-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-10-30T12:31:39+00:00",
          "details": "For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-NFV-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-NFV-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-NFV-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.src",
            "7Server-RT-7.6:kernel-rt-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debug-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-debuginfo-common-x86_64-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-doc-0:3.10.0-957.rt56.910.el7.noarch",
            "7Server-RT-7.6:kernel-rt-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-devel-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-0:3.10.0-957.rt56.910.el7.x86_64",
            "7Server-RT-7.6:kernel-rt-trace-kvm-debuginfo-0:3.10.0-957.rt56.910.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet"
    }
  ]
}

cve-2018-8781

Vulnerability from cvelistv5

Published

2018-04-23 19:00

Modified

2024-09-16 23:56

Severity ?

Summary

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3654-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3674-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3677-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3674-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://patchwork.freedesktop.org/patch/211845/	x_refsource_MISC
	https://usn.ubuntu.com/3677-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3654-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3656-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Check Point Software Technologies Ltd.	Linux Kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:02:26.050Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3654-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-1/"
          },
          {
            "name": "USN-3674-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3674-1/"
          },
          {
            "name": "USN-3677-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "USN-3674-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3674-2/"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://patchwork.freedesktop.org/patch/211845/"
          },
          {
            "name": "USN-3677-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-2/"
          },
          {
            "name": "USN-3654-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-2/"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3656-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3656-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Check Point Software Technologies Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "kernel version 3.4 and up to and including 4.15"
            }
          ]
        }
      ],
      "datePublic": "2018-03-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Local Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3654-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-1/"
        },
        {
          "name": "USN-3674-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3674-1/"
        },
        {
          "name": "USN-3677-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "USN-3674-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3674-2/"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://patchwork.freedesktop.org/patch/211845/"
        },
        {
          "name": "USN-3677-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-2/"
        },
        {
          "name": "USN-3654-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-2/"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3656-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3656-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@checkpoint.com",
          "DATE_PUBLIC": "2018-03-21T00:00:00",
          "ID": "CVE-2018-8781",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "kernel version 3.4 and up to and including 4.15"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Check Point Software Technologies Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Local Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/",
              "refsource": "MISC",
              "url": "https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3654-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-1/"
            },
            {
              "name": "USN-3674-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3674-1/"
            },
            {
              "name": "USN-3677-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3677-1/"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "USN-3674-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3674-2/"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://patchwork.freedesktop.org/patch/211845/",
              "refsource": "MISC",
              "url": "https://patchwork.freedesktop.org/patch/211845/"
            },
            {
              "name": "USN-3677-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3677-2/"
            },
            {
              "name": "USN-3654-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-2/"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3656-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3656-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2018-8781",
    "datePublished": "2018-04-23T19:00:00Z",
    "dateReserved": "2018-03-19T00:00:00",
    "dateUpdated": "2024-09-16T23:56:54.630Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5391

Vulnerability from cvelistv5

Published

2018-09-06 21:00

Modified

2024-08-05 05:33

Severity ?

Summary

The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3540	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2785	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2925	vendor-advisory, x_refsource_REDHAT
	https://www.kb.cert.org/vuls/id/641765	third-party-advisory, x_refsource_CERT-VN
	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt	x_refsource_CONFIRM
	https://usn.ubuntu.com/3741-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1041476	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:3459	vendor-advisory, x_refsource_REDHAT
	https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2933	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3740-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3741-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3590	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3742-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3740-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/105108	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3742-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:2924	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4272	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:3586	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2846	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041637	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2791	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20181003-0002/	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/07/06/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/07/06/4	mailing-list, x_refsource_MLIST
	https://support.f5.com/csp/article/K74374841?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	Linux	Kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:33:44.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3540",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3540"
          },
          {
            "name": "RHSA-2018:2785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2785"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "RHSA-2018:2925",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2925"
          },
          {
            "name": "VU#641765",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/641765"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
          },
          {
            "name": "USN-3741-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-2/"
          },
          {
            "name": "1041476",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041476"
          },
          {
            "name": "RHSA-2018:3459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3459"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f"
          },
          {
            "name": "RHSA-2018:2933",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2933"
          },
          {
            "name": "USN-3740-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-2/"
          },
          {
            "name": "USN-3741-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-1/"
          },
          {
            "name": "RHSA-2018:3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3590"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "USN-3740-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-1/"
          },
          {
            "name": "105108",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105108"
          },
          {
            "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:2924",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2924"
          },
          {
            "name": "DSA-4272",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4272"
          },
          {
            "name": "RHSA-2018:3586",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3586"
          },
          {
            "name": "RHSA-2018:2846",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2846"
          },
          {
            "name": "1041637",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041637"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "RHSA-2018:2791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2791"
          },
          {
            "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20181003-0002/"
          },
          {
            "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K74374841?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3.9*",
              "status": "affected",
              "version": "3.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Juha-Matti Tilli (Aalto University, Department of Communications and Networking / Nokia Bell Labs) for reporting this vulnerability."
        }
      ],
      "datePublic": "2018-09-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-14T12:06:39",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "RHSA-2018:3540",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3540"
        },
        {
          "name": "RHSA-2018:2785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2785"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "RHSA-2018:2925",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2925"
        },
        {
          "name": "VU#641765",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/641765"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
        },
        {
          "name": "USN-3741-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-2/"
        },
        {
          "name": "1041476",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041476"
        },
        {
          "name": "RHSA-2018:3459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3459"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f"
        },
        {
          "name": "RHSA-2018:2933",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2933"
        },
        {
          "name": "USN-3740-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-2/"
        },
        {
          "name": "USN-3741-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-1/"
        },
        {
          "name": "RHSA-2018:3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3590"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "USN-3740-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-1/"
        },
        {
          "name": "105108",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105108"
        },
        {
          "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:2924",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2924"
        },
        {
          "name": "DSA-4272",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4272"
        },
        {
          "name": "RHSA-2018:3586",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3586"
        },
        {
          "name": "RHSA-2018:2846",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2846"
        },
        {
          "name": "1041637",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041637"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "RHSA-2018:2791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2791"
        },
        {
          "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20181003-0002/"
        },
        {
          "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K74374841?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2018-5391",
          "STATE": "PUBLIC",
          "TITLE": "The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Kernel",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003e=",
                            "version_affected": "\u003e=",
                            "version_name": "3.9",
                            "version_value": "3.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Thanks to Juha-Matti Tilli (Aalto University, Department of Communications and Networking / Nokia Bell Labs) for reporting this vulnerability."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3540",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3540"
            },
            {
              "name": "RHSA-2018:2785",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2785"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "RHSA-2018:2925",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2925"
            },
            {
              "name": "VU#641765",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/641765"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
            },
            {
              "name": "USN-3741-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-2/"
            },
            {
              "name": "1041476",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041476"
            },
            {
              "name": "RHSA-2018:3459",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3459"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f"
            },
            {
              "name": "RHSA-2018:2933",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2933"
            },
            {
              "name": "USN-3740-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-2/"
            },
            {
              "name": "USN-3741-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-1/"
            },
            {
              "name": "RHSA-2018:3590",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3590"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "USN-3740-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-1/"
            },
            {
              "name": "105108",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105108"
            },
            {
              "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:2924",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2924"
            },
            {
              "name": "DSA-4272",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4272"
            },
            {
              "name": "RHSA-2018:3586",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3586"
            },
            {
              "name": "RHSA-2018:2846",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2846"
            },
            {
              "name": "1041637",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041637"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "RHSA-2018:2791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2791"
            },
            {
              "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20181003-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20181003-0002/"
            },
            {
              "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
            },
            {
              "name": "https://support.f5.com/csp/article/K74374841?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K74374841?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2018-5391",
    "datePublished": "2018-09-06T21:00:00",
    "dateReserved": "2018-01-12T00:00:00",
    "dateUpdated": "2024-08-05T05:33:44.368Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1120

Vulnerability from cvelistv5

Published

2018-06-20 13:00

Modified

2024-08-05 03:51

Severity ?

2.8 (Low) - CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Summary

A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).

References

▼	URL	Tags
	https://usn.ubuntu.com/3752-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/104229	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3752-3/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201805-14	vendor-advisory, x_refsource_GENTOO
	https://www.exploit-db.com/exploits/44806/	exploit, x_refsource_EXPLOIT-DB
	https://usn.ubuntu.com/3910-1/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685f5e3522efa81556830	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1120	x_refsource_CONFIRM
	https://usn.ubuntu.com/3910-2/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	http://seclists.org/oss-sec/2018/q2/122	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3752-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.863Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3752-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-2/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "104229",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104229"
          },
          {
            "name": "USN-3752-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-3/"
          },
          {
            "name": "GLSA-201805-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201805-14"
          },
          {
            "name": "44806",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44806/"
          },
          {
            "name": "USN-3910-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3910-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685f5e3522efa81556830"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1120"
          },
          {
            "name": "USN-3910-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3910-2/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "[oss-security] 20180517 Qualys Security Advisory - Procps-ng Audit Report",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2018/q2/122"
          },
          {
            "name": "USN-3752-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 4.17"
            }
          ]
        }
      ],
      "datePublic": "2018-05-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process\u0027s memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/\u003cpid\u003e/cmdline (or /proc/\u003cpid\u003e/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks)."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-16T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3752-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-2/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "104229",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104229"
        },
        {
          "name": "USN-3752-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-3/"
        },
        {
          "name": "GLSA-201805-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201805-14"
        },
        {
          "name": "44806",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44806/"
        },
        {
          "name": "USN-3910-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3910-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685f5e3522efa81556830"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1120"
        },
        {
          "name": "USN-3910-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3910-2/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "[oss-security] 20180517 Qualys Security Advisory - Procps-ng Audit Report",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2018/q2/122"
        },
        {
          "name": "USN-3752-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-1120",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "kernel 4.17"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "[UNKNOWN]"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process\u0027s memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/\u003cpid\u003e/cmdline (or /proc/\u003cpid\u003e/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks)."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3752-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-2/"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "104229",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104229"
            },
            {
              "name": "USN-3752-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-3/"
            },
            {
              "name": "GLSA-201805-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201805-14"
            },
            {
              "name": "44806",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44806/"
            },
            {
              "name": "USN-3910-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3910-1/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685f5e3522efa81556830",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685f5e3522efa81556830"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1120",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1120"
            },
            {
              "name": "USN-3910-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3910-2/"
            },
            {
              "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "[oss-security] 20180517 Qualys Security Advisory - Procps-ng Audit Report",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2018/q2/122"
            },
            {
              "name": "USN-3752-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1120",
    "datePublished": "2018-06-20T13:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-7740

Vulnerability from cvelistv5

Published

2018-03-07 08:00

Modified

2024-08-05 06:37

Severity ?

Summary

The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3910-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3910-2/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=199037	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/103316	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:37:57.887Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3910-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3910-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "USN-3910-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3910-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199037"
          },
          {
            "name": "103316",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103316"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-16T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3910-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3910-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "USN-3910-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3910-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199037"
        },
        {
          "name": "103316",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103316"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-7740",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3910-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3910-1/"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "USN-3910-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3910-2/"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199037",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199037"
            },
            {
              "name": "103316",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103316"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7740",
    "datePublished": "2018-03-07T08:00:00",
    "dateReserved": "2018-03-07T00:00:00",
    "dateUpdated": "2024-08-05T06:37:57.887Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10878

Vulnerability from cvelistv5

Published

2018-07-26 18:00

Modified

2024-08-05 07:46

Severity ?

4.8 (Medium) - CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Summary

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-2/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10878	x_refsource_CONFIRM
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=77260807d1170a8cf35dbb06e07461a655f67eee	x_refsource_CONFIRM
	https://usn.ubuntu.com/3871-5/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-4/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=819b23f1c501b17b9694325471789e6b5cc2d0d2	x_refsource_CONFIRM
	http://patchwork.ozlabs.org/patch/929238/	x_refsource_CONFIRM
	http://patchwork.ozlabs.org/patch/929237/	x_refsource_CONFIRM
	https://usn.ubuntu.com/3871-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=199865	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-3/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:46:47.494Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3753-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10878"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=77260807d1170a8cf35dbb06e07461a655f67eee"
          },
          {
            "name": "USN-3871-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-5/"
          },
          {
            "name": "USN-3871-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-4/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=819b23f1c501b17b9694325471789e6b5cc2d0d2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/929238/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/929237/"
          },
          {
            "name": "USN-3871-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199865"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-1/"
          },
          {
            "name": "USN-3871-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-3/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-09T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3753-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10878"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=77260807d1170a8cf35dbb06e07461a655f67eee"
        },
        {
          "name": "USN-3871-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-5/"
        },
        {
          "name": "USN-3871-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-4/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=819b23f1c501b17b9694325471789e6b5cc2d0d2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/929238/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/929237/"
        },
        {
          "name": "USN-3871-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199865"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-1/"
        },
        {
          "name": "USN-3871-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-3/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10878",
    "datePublished": "2018-07-26T18:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:46:47.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5848

Vulnerability from cvelistv5

Published

2018-06-12 20:00

Modified

2024-09-17 00:31

Severity ?

Summary

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Qualcomm, Inc.	Android for MSM, Firefox OS for MSM, QRD Android

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:47:55.911Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android for MSM, Firefox OS for MSM, QRD Android",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "All Android releases from CAF using the Linux kernel"
            }
          ]
        }
      ],
      "datePublic": "2018-05-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the \u0027ie_len\u0027 argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Copy without Checking Size of Input in WIGIG",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-01T20:06:11",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "DATE_PUBLIC": "2018-05-11T00:00:00",
          "ID": "CVE-2018-5848",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android for MSM, Firefox OS for MSM, QRD Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All Android releases from CAF using the Linux kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the \u0027ie_len\u0027 argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer Copy without Checking Size of Input in WIGIG"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2",
              "refsource": "MISC",
              "url": "https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2018-5848",
    "datePublished": "2018-06-12T20:00:00Z",
    "dateReserved": "2018-01-19T00:00:00",
    "dateUpdated": "2024-09-17T00:31:46.093Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10940

Vulnerability from cvelistv5

Published

2018-05-09 17:00

Modified

2024-08-05 07:54

Severity ?

Summary

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.

References

▼	URL	Tags
	https://usn.ubuntu.com/3676-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3695-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3695-2/	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html	mailing-list, x_refsource_MLIST
	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6	x_refsource_MISC
	https://usn.ubuntu.com/3754-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707	x_refsource_MISC
	https://usn.ubuntu.com/3676-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/104154	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:35.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3676-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3676-1/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
          },
          {
            "name": "USN-3695-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3695-1/"
          },
          {
            "name": "USN-3695-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3695-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
          },
          {
            "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
          },
          {
            "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
          },
          {
            "name": "USN-3676-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3676-2/"
          },
          {
            "name": "104154",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104154"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3676-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3676-1/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
        },
        {
          "name": "USN-3695-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3695-1/"
        },
        {
          "name": "USN-3695-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3695-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
        },
        {
          "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
        },
        {
          "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
        },
        {
          "name": "USN-3676-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3676-2/"
        },
        {
          "name": "104154",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104154"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10940",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3676-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3676-1/"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
            },
            {
              "name": "USN-3695-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3695-1/"
            },
            {
              "name": "USN-3695-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3695-2/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
            },
            {
              "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
            },
            {
              "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6"
            },
            {
              "name": "USN-3754-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3754-1/"
            },
            {
              "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707"
            },
            {
              "name": "USN-3676-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3676-2/"
            },
            {
              "name": "104154",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104154"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10940",
    "datePublished": "2018-05-09T17:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:35.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-7757

Vulnerability from cvelistv5

Published

2018-03-08 14:00

Modified

2024-08-05 06:37

Severity ?

Summary

Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3654-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/4a491b1ab11ca0556d2fda1ff1301e862a2d44c4	x_refsource_MISC
	https://usn.ubuntu.com/3697-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3697-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/103348	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3654-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3656-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4	x_refsource_MISC
	https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:37:57.906Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3654-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
          },
          {
            "name": "USN-3697-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3697-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-2/"
          },
          {
            "name": "103348",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103348"
          },
          {
            "name": "USN-3654-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-2/"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3656-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3656-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3654-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
        },
        {
          "name": "USN-3697-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3697-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-2/"
        },
        {
          "name": "103348",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103348"
        },
        {
          "name": "USN-3654-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-2/"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3656-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3656-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-7757",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3654-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-1/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/4a491b1ab11ca0556d2fda1ff1301e862a2d44c4",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
            },
            {
              "name": "USN-3697-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-1/"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3697-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-2/"
            },
            {
              "name": "103348",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103348"
            },
            {
              "name": "USN-3654-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-2/"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3656-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3656-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7757",
    "datePublished": "2018-03-08T14:00:00",
    "dateReserved": "2018-03-08T00:00:00",
    "dateUpdated": "2024-08-05T06:37:57.906Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-8830

Vulnerability from cvelistv5

Published

2016-05-02 10:00

Modified

2024-08-06 08:29

Severity ?

Summary

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2970-1	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3503	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2969-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2968-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1314275	x_refsource_CONFIRM
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2968-2	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/03/02/9	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:29:22.023Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b"
          },
          {
            "name": "USN-2970-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2970-1"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "name": "DSA-3503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3503"
          },
          {
            "name": "USN-2969-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2969-1"
          },
          {
            "name": "USN-2968-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2968-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364"
          },
          {
            "name": "USN-2968-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2968-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b"
          },
          {
            "name": "[oss-security] 20160302 Re: CVE Request: Linux: aio write triggers integer overflow in some network protocols",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/03/02/9"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b"
        },
        {
          "name": "USN-2970-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2970-1"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "name": "DSA-3503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3503"
        },
        {
          "name": "USN-2969-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2969-1"
        },
        {
          "name": "USN-2968-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2968-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364"
        },
        {
          "name": "USN-2968-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2968-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b"
        },
        {
          "name": "[oss-security] 20160302 Re: CVE Request: Linux: aio write triggers integer overflow in some network protocols",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/03/02/9"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2015-8830",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b"
            },
            {
              "name": "USN-2970-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2970-1"
            },
            {
              "name": "RHSA-2018:1854",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1854"
            },
            {
              "name": "DSA-3503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3503"
            },
            {
              "name": "USN-2969-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2969-1"
            },
            {
              "name": "USN-2968-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2968-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314275"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364"
            },
            {
              "name": "USN-2968-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2968-2"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b"
            },
            {
              "name": "[oss-security] 20160302 Re: CVE Request: Linux: aio write triggers integer overflow in some network protocols",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/03/02/9"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2015-8830",
    "datePublished": "2016-05-02T10:00:00",
    "dateReserved": "2016-03-02T00:00:00",
    "dateUpdated": "2024-08-06T08:29:22.023Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1000026

Vulnerability from cvelistv5

Published

2018-02-09 23:00

Modified

2024-08-05 12:33

Severity ?

Summary

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3620-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://patchwork.ozlabs.org/patch/859410/	x_refsource_MISC
	http://lists.openwall.net/netdev/2018/01/16/40	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
	http://lists.openwall.net/netdev/2018/01/18/96	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3620-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:33:48.963Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "name": "USN-3620-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-2/"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://patchwork.ozlabs.org/patch/859410/"
          },
          {
            "name": "[netdev] 20180116 http://lists.openwall.net/netdev/2018/01/16/40",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.openwall.net/netdev/2018/01/16/40"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "[netdev] 20180118 http://lists.openwall.net/netdev/2018/01/18/96",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.openwall.net/netdev/2018/01/18/96"
          },
          {
            "name": "USN-3620-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-01-18T00:00:00",
      "datePublic": "2018-01-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM.."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-03T11:06:03",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "name": "USN-3620-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-2/"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://patchwork.ozlabs.org/patch/859410/"
        },
        {
          "name": "[netdev] 20180116 http://lists.openwall.net/netdev/2018/01/16/40",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.openwall.net/netdev/2018/01/16/40"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "[netdev] 20180118 http://lists.openwall.net/netdev/2018/01/18/96",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.openwall.net/netdev/2018/01/18/96"
        },
        {
          "name": "USN-3620-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "1/18/2018 7:01:42",
          "ID": "CVE-2018-1000026",
          "REQUESTER": "dja@axtens.net",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM.."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "USN-3617-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-3/"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "USN-3620-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-2/"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://patchwork.ozlabs.org/patch/859410/",
              "refsource": "MISC",
              "url": "https://patchwork.ozlabs.org/patch/859410/"
            },
            {
              "name": "[netdev] 20180116 http://lists.openwall.net/netdev/2018/01/16/40",
              "refsource": "MLIST",
              "url": "http://lists.openwall.net/netdev/2018/01/16/40"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "[netdev] 20180118 http://lists.openwall.net/netdev/2018/01/18/96",
              "refsource": "MLIST",
              "url": "http://lists.openwall.net/netdev/2018/01/18/96"
            },
            {
              "name": "USN-3620-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000026",
    "datePublished": "2018-02-09T23:00:00",
    "dateReserved": "2018-01-29T00:00:00",
    "dateUpdated": "2024-08-05T12:33:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10883

Vulnerability from cvelistv5

Published

2018-07-30 15:00

Modified

2024-08-05 07:54

Severity ?

4.8 (Medium) - CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Summary

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3879-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3879-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10883	x_refsource_CONFIRM
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e09463f220ca9a1a1ecfda84fcda658f99a1f12a	x_refsource_CONFIRM
	https://usn.ubuntu.com/3871-5/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-4/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8bc1379b82b8e809eef77a9fedbb75c6c297be19	x_refsource_CONFIRM
	https://usn.ubuntu.com/3871-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3871-3/	vendor-advisory, x_refsource_UBUNTU
	https://support.f5.com/csp/article/K94735334?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:34.854Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3879-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3879-2/"
          },
          {
            "name": "USN-3879-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3879-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10883"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e09463f220ca9a1a1ecfda84fcda658f99a1f12a"
          },
          {
            "name": "USN-3871-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-5/"
          },
          {
            "name": "USN-3871-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-4/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8bc1379b82b8e809eef77a9fedbb75c6c297be19"
          },
          {
            "name": "USN-3871-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3871-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-3/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K94735334?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-12T09:06:03",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3879-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3879-2/"
        },
        {
          "name": "USN-3879-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3879-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10883"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e09463f220ca9a1a1ecfda84fcda658f99a1f12a"
        },
        {
          "name": "USN-3871-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-5/"
        },
        {
          "name": "USN-3871-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-4/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8bc1379b82b8e809eef77a9fedbb75c6c297be19"
        },
        {
          "name": "USN-3871-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3871-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-3/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K94735334?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10883",
    "datePublished": "2018-07-30T15:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:34.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-18690

Vulnerability from cvelistv5

Published

2018-10-26 18:00

Modified

2024-08-05 11:16

Severity ?

Summary

In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.

References

▼	URL	Tags
	https://usn.ubuntu.com/3848-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3847-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3847-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3849-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3849-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3848-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3847-3/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.suse.com/show_bug.cgi?id=1105025	x_refsource_MISC
	http://www.securityfocus.com/bid/105753	vdb-entry, x_refsource_BID
	https://bugzilla.kernel.org/show_bug.cgi?id=199119	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html	mailing-list, x_refsource_MLIST
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c	x_refsource_MISC
	https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:16:00.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3848-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3848-2/"
          },
          {
            "name": "USN-3847-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-1/"
          },
          {
            "name": "USN-3847-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-2/"
          },
          {
            "name": "USN-3849-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-1/"
          },
          {
            "name": "USN-3849-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-2/"
          },
          {
            "name": "USN-3848-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3848-1/"
          },
          {
            "name": "USN-3847-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-3/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1105025"
          },
          {
            "name": "105753",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105753"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199119"
          },
          {
            "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-01T20:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3848-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3848-2/"
        },
        {
          "name": "USN-3847-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-1/"
        },
        {
          "name": "USN-3847-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-2/"
        },
        {
          "name": "USN-3849-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-1/"
        },
        {
          "name": "USN-3849-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-2/"
        },
        {
          "name": "USN-3848-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3848-1/"
        },
        {
          "name": "USN-3847-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-3/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1105025"
        },
        {
          "name": "105753",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105753"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199119"
        },
        {
          "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-18690",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3848-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3848-2/"
            },
            {
              "name": "USN-3847-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-1/"
            },
            {
              "name": "USN-3847-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-2/"
            },
            {
              "name": "USN-3849-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3849-1/"
            },
            {
              "name": "USN-3849-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3849-2/"
            },
            {
              "name": "USN-3848-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3848-1/"
            },
            {
              "name": "USN-3847-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-3/"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1105025",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1105025"
            },
            {
              "name": "105753",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105753"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199119",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199119"
            },
            {
              "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-18690",
    "datePublished": "2018-10-26T18:00:00",
    "dateReserved": "2018-10-26T00:00:00",
    "dateUpdated": "2024-08-05T11:16:00.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-0861

Vulnerability from cvelistv5

Published

2017-11-16 23:00

Modified

2024-09-16 19:09

Severity ?

Summary

Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/102329	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisory, x_refsource_REDHAT
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
	https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	x_refsource_CONFIRM
	https://source.android.com/security/bulletin/pixel/2017-11-01	x_refsource_CONFIRM
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229	x_refsource_CONFIRM
	https://security-tracker.debian.org/tracker/CVE-2017-0861	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	Google Inc.	Android

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:18:06.391Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "[secure-testing-commits] 20171206 r58306 - data/CVE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "102329",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102329"
          },
          {
            "name": "RHSA-2020:0036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0036"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/pixel/2017-11-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2017-0861"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "Google Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "datePublic": "2017-11-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:55",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "[secure-testing-commits] 20171206 r58306 - data/CVE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "102329",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102329"
        },
        {
          "name": "RHSA-2020:0036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0036"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/pixel/2017-11-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2017-0861"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "DATE_PUBLIC": "2017-11-06T00:00:00",
          "ID": "CVE-2017-0861",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "USN-3617-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-3/"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "[secure-testing-commits] 20171206 r58306 - data/CVE",
              "refsource": "MLIST",
              "url": "http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "102329",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102329"
            },
            {
              "name": "RHSA-2020:0036",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0036"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://source.android.com/security/bulletin/pixel/2017-11-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/pixel/2017-11-01"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229"
            },
            {
              "name": "https://security-tracker.debian.org/tracker/CVE-2017-0861",
              "refsource": "CONFIRM",
              "url": "https://security-tracker.debian.org/tracker/CVE-2017-0861"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2017-0861",
    "datePublished": "2017-11-16T23:00:00Z",
    "dateReserved": "2016-11-29T00:00:00",
    "dateUpdated": "2024-09-16T19:09:26.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18208

Vulnerability from cvelistv5

Published

2018-03-01 05:00

Modified

2024-08-05 21:13

Severity ?

Summary

The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91	x_refsource_MISC
	https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3653-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3655-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3655-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3653-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3657-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91	x_refsource_MISC
	https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:3967	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4058	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4057	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:13:49.223Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3653-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-2/"
          },
          {
            "name": "USN-3655-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-1/"
          },
          {
            "name": "USN-3655-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3655-2/"
          },
          {
            "name": "USN-3653-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3653-1/"
          },
          {
            "name": "USN-3657-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3657-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "RHSA-2019:3967",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3967"
          },
          {
            "name": "RHSA-2019:4058",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4058"
          },
          {
            "name": "RHSA-2019:4057",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4057"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-03T11:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3653-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-2/"
        },
        {
          "name": "USN-3655-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-1/"
        },
        {
          "name": "USN-3655-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3655-2/"
        },
        {
          "name": "USN-3653-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3653-1/"
        },
        {
          "name": "USN-3657-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3657-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "RHSA-2019:3967",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3967"
        },
        {
          "name": "RHSA-2019:4058",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4058"
        },
        {
          "name": "RHSA-2019:4057",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4057"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18208",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3653-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-2/"
            },
            {
              "name": "USN-3655-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-1/"
            },
            {
              "name": "USN-3655-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3655-2/"
            },
            {
              "name": "USN-3653-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3653-1/"
            },
            {
              "name": "USN-3657-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3657-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "RHSA-2019:3967",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3967"
            },
            {
              "name": "RHSA-2019:4058",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4058"
            },
            {
              "name": "RHSA-2019:4057",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4057"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18208",
    "datePublished": "2018-03-01T05:00:00",
    "dateReserved": "2018-02-28T00:00:00",
    "dateUpdated": "2024-08-05T21:13:49.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1130

Vulnerability from cvelistv5

Published

2018-05-10 13:00

Modified

2024-08-05 03:51

Severity ?

5.5 (Medium) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3654-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130	x_refsource_CONFIRM
	https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3697-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3697-2/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2	x_refsource_CONFIRM
	https://usn.ubuntu.com/3654-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3656-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://marc.info/?l=linux-netdev&m=152036596825220&w=2	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	unspecified	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.970Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
          },
          {
            "name": "USN-3654-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94"
          },
          {
            "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
          },
          {
            "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "name": "USN-3697-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-1/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "USN-3697-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2"
          },
          {
            "name": "USN-3654-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-2/"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "USN-3656-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3656-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "[linux-netdev] 20180306 [PATCH net] dccp: check sk for closed state in dccp_sendmsg()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linux-netdev\u0026m=152036596825220\u0026w=2"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "unspecified",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 4.16-rc7"
            }
          ]
        }
      ],
      "datePublic": "2018-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
        },
        {
          "name": "USN-3654-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94"
        },
        {
          "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
        },
        {
          "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "name": "USN-3697-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-1/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "USN-3697-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2"
        },
        {
          "name": "USN-3654-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-2/"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "USN-3656-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3656-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "[linux-netdev] 20180306 [PATCH net] dccp: check sk for closed state in dccp_sendmsg()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://marc.info/?l=linux-netdev\u0026m=152036596825220\u0026w=2"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-1130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "kernel 4.16-rc7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": ""
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
            },
            {
              "name": "USN-3654-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-1/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130"
            },
            {
              "name": "https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94",
              "refsource": "MISC",
              "url": "https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94"
            },
            {
              "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
            },
            {
              "name": "[debian-lts-announce] 20180601 [SECURITY] [DLA 1392-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html"
            },
            {
              "name": "RHSA-2018:1854",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1854"
            },
            {
              "name": "USN-3697-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-1/"
            },
            {
              "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
            },
            {
              "name": "USN-3697-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-2/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2"
            },
            {
              "name": "USN-3654-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-2/"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "USN-3656-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3656-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "[linux-netdev] 20180306 [PATCH net] dccp: check sk for closed state in dccp_sendmsg()",
              "refsource": "MLIST",
              "url": "https://marc.info/?l=linux-netdev\u0026m=152036596825220\u0026w=2"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1130",
    "datePublished": "2018-05-10T13:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-4913

Vulnerability from cvelistv5

Published

2016-05-23 10:00

Modified

2024-08-06 00:46

Severity ?

Summary

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3017-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3017-3	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3018-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3021-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1337528	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3017-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3607	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-3016-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3016-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/18/5	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-3018-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/18/3	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90730	vdb-entry, x_refsource_BID
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3016-3	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3016-4	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-3020-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:46:39.243Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3017-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3017-1"
          },
          {
            "name": "SUSE-SU-2016:1985",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html"
          },
          {
            "name": "USN-3017-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3017-3"
          },
          {
            "name": "USN-3018-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3018-2"
          },
          {
            "name": "USN-3021-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3021-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528"
          },
          {
            "name": "USN-3017-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3017-2"
          },
          {
            "name": "USN-3019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3019-1"
          },
          {
            "name": "DSA-3607",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3607"
          },
          {
            "name": "USN-3016-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3016-2"
          },
          {
            "name": "USN-3016-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3016-1"
          },
          {
            "name": "SUSE-SU-2016:1672",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html"
          },
          {
            "name": "USN-3021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3021-1"
          },
          {
            "name": "[oss-security] 20160518 Re: CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/18/5"
          },
          {
            "name": "USN-3018-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3018-1"
          },
          {
            "name": "[oss-security] 20160518 CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/18/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html"
          },
          {
            "name": "90730",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90730"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6"
          },
          {
            "name": "USN-3016-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3016-3"
          },
          {
            "name": "USN-3016-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3016-4"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3020-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3020-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \\0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3017-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3017-1"
        },
        {
          "name": "SUSE-SU-2016:1985",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html"
        },
        {
          "name": "USN-3017-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3017-3"
        },
        {
          "name": "USN-3018-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3018-2"
        },
        {
          "name": "USN-3021-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3021-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528"
        },
        {
          "name": "USN-3017-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3017-2"
        },
        {
          "name": "USN-3019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3019-1"
        },
        {
          "name": "DSA-3607",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3607"
        },
        {
          "name": "USN-3016-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3016-2"
        },
        {
          "name": "USN-3016-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3016-1"
        },
        {
          "name": "SUSE-SU-2016:1672",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html"
        },
        {
          "name": "USN-3021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3021-1"
        },
        {
          "name": "[oss-security] 20160518 Re: CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/18/5"
        },
        {
          "name": "USN-3018-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3018-1"
        },
        {
          "name": "[oss-security] 20160518 CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/18/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html"
        },
        {
          "name": "90730",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90730"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6"
        },
        {
          "name": "USN-3016-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3016-3"
        },
        {
          "name": "USN-3016-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3016-4"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3020-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3020-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2016-4913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \\0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3017-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3017-1"
            },
            {
              "name": "SUSE-SU-2016:1985",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html"
            },
            {
              "name": "USN-3017-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3017-3"
            },
            {
              "name": "USN-3018-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3018-2"
            },
            {
              "name": "USN-3021-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3021-2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1337528"
            },
            {
              "name": "USN-3017-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3017-2"
            },
            {
              "name": "USN-3019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3019-1"
            },
            {
              "name": "DSA-3607",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3607"
            },
            {
              "name": "USN-3016-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3016-2"
            },
            {
              "name": "USN-3016-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3016-1"
            },
            {
              "name": "SUSE-SU-2016:1672",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html"
            },
            {
              "name": "USN-3021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3021-1"
            },
            {
              "name": "[oss-security] 20160518 Re: CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/18/5"
            },
            {
              "name": "USN-3018-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3018-1"
            },
            {
              "name": "[oss-security] 20160518 CVE Request: Linux: information leak in Rock Ridge Extensions to iso9660 -- fs/isofs/rock.c",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/18/3"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html"
            },
            {
              "name": "90730",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90730"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6"
            },
            {
              "name": "USN-3016-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3016-3"
            },
            {
              "name": "USN-3016-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3016-4"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3020-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3020-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2016-4913",
    "datePublished": "2016-05-23T10:00:00",
    "dateReserved": "2016-05-18T00:00:00",
    "dateUpdated": "2024-08-06T00:46:39.243Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10902

Vulnerability from cvelistv5

Published

2018-08-21 19:00

Modified

2024-08-05 07:54

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3776-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3776-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3847-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3847-2/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10902	x_refsource_CONFIRM
	https://usn.ubuntu.com/3849-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:0415	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3849-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1041529	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2018/dsa-4308	vendor-advisory, x_refsource_DEBIAN
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39675f7a7c7e7702f7d5341f1e0d01db746543a0	x_refsource_MISC
	https://usn.ubuntu.com/3847-3/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/105119	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2019:0641	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3217	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3967	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:35.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3776-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3776-1/"
          },
          {
            "name": "USN-3776-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3776-2/"
          },
          {
            "name": "USN-3847-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-1/"
          },
          {
            "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
          },
          {
            "name": "USN-3847-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10902"
          },
          {
            "name": "USN-3849-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-1/"
          },
          {
            "name": "RHSA-2019:0415",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0415"
          },
          {
            "name": "USN-3849-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-2/"
          },
          {
            "name": "1041529",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041529"
          },
          {
            "name": "DSA-4308",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4308"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39675f7a7c7e7702f7d5341f1e0d01db746543a0"
          },
          {
            "name": "USN-3847-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-3/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "105119",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105119"
          },
          {
            "name": "RHSA-2019:0641",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0641"
          },
          {
            "name": "RHSA-2019:3217",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3217"
          },
          {
            "name": "RHSA-2019:3967",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3967"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-26T14:07:14",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3776-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3776-1/"
        },
        {
          "name": "USN-3776-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3776-2/"
        },
        {
          "name": "USN-3847-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-1/"
        },
        {
          "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
        },
        {
          "name": "USN-3847-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10902"
        },
        {
          "name": "USN-3849-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-1/"
        },
        {
          "name": "RHSA-2019:0415",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0415"
        },
        {
          "name": "USN-3849-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-2/"
        },
        {
          "name": "1041529",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041529"
        },
        {
          "name": "DSA-4308",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4308"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39675f7a7c7e7702f7d5341f1e0d01db746543a0"
        },
        {
          "name": "USN-3847-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-3/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "105119",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105119"
        },
        {
          "name": "RHSA-2019:0641",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0641"
        },
        {
          "name": "RHSA-2019:3217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3217"
        },
        {
          "name": "RHSA-2019:3967",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3967"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10902",
    "datePublished": "2018-08-21T19:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:35.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1092

Vulnerability from cvelistv5

Published

2018-04-02 03:00

Modified

2024-08-05 03:51

Severity ?

Summary

The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.

References

▼	URL	Tags
	https://usn.ubuntu.com/3676-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3678-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	http://openwall.com/lists/oss-security/2018/03/29/1	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3678-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3677-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3754-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=199179	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3678-3/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3677-2/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1560777	x_refsource_MISC
	https://usn.ubuntu.com/3676-2/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3678-4/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=199275	x_refsource_MISC

Impacted products

▼	Vendor	Product
	n/a	Linux kernel through version 4.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.417Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3676-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3676-1/"
          },
          {
            "name": "USN-3678-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3678-2/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/03/29/1"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3678-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3678-1/"
          },
          {
            "name": "USN-3677-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199179"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3678-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3678-3/"
          },
          {
            "name": "USN-3677-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3677-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560777"
          },
          {
            "name": "USN-3676-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3676-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3678-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3678-4/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199275"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel through version 4.15",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel through version 4.15"
            }
          ]
        }
      ],
      "datePublic": "2018-04-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "NULL pointer dereference",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3676-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3676-1/"
        },
        {
          "name": "USN-3678-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3678-2/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/03/29/1"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3678-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3678-1/"
        },
        {
          "name": "USN-3677-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199179"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3678-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3678-3/"
        },
        {
          "name": "USN-3677-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3677-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560777"
        },
        {
          "name": "USN-3676-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3676-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3678-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3678-4/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199275"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1092",
    "datePublished": "2018-04-02T03:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.417Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5344

Vulnerability from cvelistv5

Published

2018-01-12 09:00

Modified

2024-08-05 05:33

Severity ?

Summary

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/102503	vdb-entry, x_refsource_BID
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5	x_refsource_MISC
	https://usn.ubuntu.com/3583-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3583-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5	x_refsource_MISC

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:33:43.863Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "name": "102503",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102503"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
          },
          {
            "name": "USN-3583-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-2/"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3583-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3583-1/"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-01-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "name": "102503",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102503"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
        },
        {
          "name": "USN-3583-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-2/"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3583-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3583-1/"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-5344",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "USN-3617-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-3/"
            },
            {
              "name": "102503",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102503"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
            },
            {
              "name": "USN-3583-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-2/"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3583-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3583-1/"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-5344",
    "datePublished": "2018-01-12T09:00:00",
    "dateReserved": "2018-01-11T00:00:00",
    "dateUpdated": "2024-08-05T05:33:43.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-13405

Vulnerability from cvelistv5

Published

2018-07-06 14:00

Modified

2024-08-05 09:00

Severity ?

Summary

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.

References

▼	URL	Tags
	https://usn.ubuntu.com/3752-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3752-3/	vendor-advisory, x_refsource_UBUNTU
	https://twitter.com/grsecurity/status/1015082951204327425	x_refsource_MISC
	https://usn.ubuntu.com/3753-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3754-1/	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2018/07/13/2	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html	mailing-list, x_refsource_MLIST
	https://www.exploit-db.com/exploits/45033/	exploit, x_refsource_EXPLOIT-DB
	https://www.debian.org/security/2018/dsa-4266	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/106503	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3752-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:0717	vendor-advisory, x_refsource_REDHAT
	https://support.f5.com/csp/article/K00854051	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:2476	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2566	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2696	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2730	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4159	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4164	vendor-advisory, x_refsource_REDHAT
	https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/	vendor-advisory, x_refsource_FEDORA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:00:35.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3752-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-2/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3752-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-3/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/grsecurity/status/1015082951204327425"
          },
          {
            "name": "USN-3753-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-2/"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/07/13/2"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
          },
          {
            "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
          },
          {
            "name": "45033",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45033/"
          },
          {
            "name": "DSA-4266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4266"
          },
          {
            "name": "106503",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106503"
          },
          {
            "name": "USN-3752-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
          },
          {
            "name": "RHSA-2019:0717",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0717"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K00854051"
          },
          {
            "name": "RHSA-2019:2476",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2476"
          },
          {
            "name": "RHSA-2019:2566",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2566"
          },
          {
            "name": "RHSA-2019:2696",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2696"
          },
          {
            "name": "RHSA-2019:2730",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2730"
          },
          {
            "name": "RHSA-2019:4159",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4159"
          },
          {
            "name": "RHSA-2019:4164",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4164"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406"
          },
          {
            "name": "FEDORA-2022-3a60c34473",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/"
          },
          {
            "name": "FEDORA-2022-5d0676b098",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-25T18:06:30",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3752-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-2/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3752-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-3/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/grsecurity/status/1015082951204327425"
        },
        {
          "name": "USN-3753-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-2/"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/07/13/2"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
        },
        {
          "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
        },
        {
          "name": "45033",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45033/"
        },
        {
          "name": "DSA-4266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4266"
        },
        {
          "name": "106503",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106503"
        },
        {
          "name": "USN-3752-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
        },
        {
          "name": "RHSA-2019:0717",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0717"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K00854051"
        },
        {
          "name": "RHSA-2019:2476",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2476"
        },
        {
          "name": "RHSA-2019:2566",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2566"
        },
        {
          "name": "RHSA-2019:2696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2696"
        },
        {
          "name": "RHSA-2019:2730",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2730"
        },
        {
          "name": "RHSA-2019:4159",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4159"
        },
        {
          "name": "RHSA-2019:4164",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4164"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406"
        },
        {
          "name": "FEDORA-2022-3a60c34473",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/"
        },
        {
          "name": "FEDORA-2022-5d0676b098",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-13405",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3752-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-2/"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "USN-3752-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-3/"
            },
            {
              "name": "https://twitter.com/grsecurity/status/1015082951204327425",
              "refsource": "MISC",
              "url": "https://twitter.com/grsecurity/status/1015082951204327425"
            },
            {
              "name": "USN-3753-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3753-2/"
            },
            {
              "name": "USN-3754-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3754-1/"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2018/07/13/2",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2018/07/13/2"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
            },
            {
              "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
            },
            {
              "name": "45033",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45033/"
            },
            {
              "name": "DSA-4266",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4266"
            },
            {
              "name": "106503",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106503"
            },
            {
              "name": "USN-3752-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3753-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3753-1/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7"
            },
            {
              "name": "RHSA-2019:0717",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0717"
            },
            {
              "name": "https://support.f5.com/csp/article/K00854051",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K00854051"
            },
            {
              "name": "RHSA-2019:2476",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2476"
            },
            {
              "name": "RHSA-2019:2566",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2566"
            },
            {
              "name": "RHSA-2019:2696",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2696"
            },
            {
              "name": "RHSA-2019:2730",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2730"
            },
            {
              "name": "RHSA-2019:4159",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4159"
            },
            {
              "name": "RHSA-2019:4164",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4164"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=0b3369840cd61c23e2b9241093737b4c395cb406"
            },
            {
              "name": "FEDORA-2022-3a60c34473",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTKKIAUMR5FAYLZ7HLEPOXMKAAE3BYBQ/"
            },
            {
              "name": "FEDORA-2022-5d0676b098",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRBNBX73SAFKQWBOX76SLMWPTKJPVGEJ/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-13405",
    "datePublished": "2018-07-06T14:00:00",
    "dateReserved": "2018-07-06T00:00:00",
    "dateUpdated": "2024-08-05T09:00:35.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-17805

Vulnerability from cvelistv5

Published

2017-12-20 23:00

Modified

2024-08-05 20:59

Severity ?

Summary

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3617-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3619-2/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4082	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3617-3/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3632-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3620-2/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/102291	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2017/dsa-4073	vendor-advisory, x_refsource_DEBIAN
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e	x_refsource_CONFIRM
	https://usn.ubuntu.com/3617-2/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e	x_refsource_CONFIRM
	https://usn.ubuntu.com/3620-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3619-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2473	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:59:17.879Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3617-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-1/"
          },
          {
            "name": "USN-3619-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-2/"
          },
          {
            "name": "DSA-4082",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4082"
          },
          {
            "name": "USN-3617-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-3/"
          },
          {
            "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
          },
          {
            "name": "SUSE-SU-2018:0012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "name": "USN-3632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3632-1/"
          },
          {
            "name": "USN-3620-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-2/"
          },
          {
            "name": "openSUSE-SU-2018:0022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
          },
          {
            "name": "102291",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102291"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
          },
          {
            "name": "SUSE-SU-2018:0010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
          },
          {
            "name": "DSA-4073",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4073"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e"
          },
          {
            "name": "USN-3617-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3617-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e"
          },
          {
            "name": "USN-3620-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3619-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3619-1/"
          },
          {
            "name": "openSUSE-SU-2018:0023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
          },
          {
            "name": "RHSA-2019:2473",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2473"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-13T17:06:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3617-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-1/"
        },
        {
          "name": "USN-3619-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-2/"
        },
        {
          "name": "DSA-4082",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4082"
        },
        {
          "name": "USN-3617-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-3/"
        },
        {
          "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
        },
        {
          "name": "SUSE-SU-2018:0012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "name": "USN-3632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3632-1/"
        },
        {
          "name": "USN-3620-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-2/"
        },
        {
          "name": "openSUSE-SU-2018:0022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
        },
        {
          "name": "102291",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102291"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
        },
        {
          "name": "SUSE-SU-2018:0010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
        },
        {
          "name": "DSA-4073",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4073"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e"
        },
        {
          "name": "USN-3617-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3617-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e"
        },
        {
          "name": "USN-3620-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3619-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3619-1/"
        },
        {
          "name": "openSUSE-SU-2018:0023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
        },
        {
          "name": "RHSA-2019:2473",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2473"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17805",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "USN-3617-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-1/"
            },
            {
              "name": "USN-3619-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-2/"
            },
            {
              "name": "DSA-4082",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4082"
            },
            {
              "name": "USN-3617-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-3/"
            },
            {
              "name": "[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html"
            },
            {
              "name": "SUSE-SU-2018:0012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "USN-3632-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3632-1/"
            },
            {
              "name": "USN-3620-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-2/"
            },
            {
              "name": "openSUSE-SU-2018:0022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
            },
            {
              "name": "102291",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102291"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
              "refsource": "CONFIRM",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
            },
            {
              "name": "SUSE-SU-2018:0010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
            },
            {
              "name": "DSA-4073",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4073"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e"
            },
            {
              "name": "USN-3617-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3617-2/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e"
            },
            {
              "name": "USN-3620-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-1/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3619-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3619-1/"
            },
            {
              "name": "openSUSE-SU-2018:0023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
            },
            {
              "name": "RHSA-2019:2473",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2473"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17805",
    "datePublished": "2017-12-20T23:00:00",
    "dateReserved": "2017-12-20T00:00:00",
    "dateUpdated": "2024-08-05T20:59:17.879Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10322

Vulnerability from cvelistv5

Published

2018-04-24 06:00

Modified

2024-08-05 07:39

Severity ?

Summary

The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://www.spinics.net/lists/linux-xfs/msg17215.html	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/103960	vdb-entry, x_refsource_BID
	https://bugzilla.kernel.org/show_bug.cgi?id=199377	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/4578-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/4579-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:39:06.779Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-xfs/msg17215.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "103960",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103960"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199377"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-4578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4578-1/"
          },
          {
            "name": "USN-4579-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4579-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-04-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-16T00:06:13",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.spinics.net/lists/linux-xfs/msg17215.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "103960",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103960"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199377"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-4578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4578-1/"
        },
        {
          "name": "USN-4579-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4579-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10322",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "https://www.spinics.net/lists/linux-xfs/msg17215.html",
              "refsource": "MISC",
              "url": "https://www.spinics.net/lists/linux-xfs/msg17215.html"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "103960",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103960"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199377",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199377"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-4578-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4578-1/"
            },
            {
              "name": "USN-4579-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4579-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10322",
    "datePublished": "2018-04-24T06:00:00",
    "dateReserved": "2018-04-24T00:00:00",
    "dateUpdated": "2024-08-05T07:39:06.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18360

Vulnerability from cvelistv5

Published

2019-01-31 09:00

Modified

2024-08-05 21:20

Severity ?

Summary

In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates.

References

▼	URL	Tags
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3	x_refsource_MISC
	https://bugzilla.suse.com/show_bug.cgi?id=1123706	x_refsource_MISC
	http://www.securityfocus.com/bid/106802	vdb-entry, x_refsource_BID
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b	x_refsource_MISC
	https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b	x_refsource_MISC
	https://usn.ubuntu.com/3933-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3933-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:20:50.429Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1123706"
          },
          {
            "name": "106802",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106802"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b"
          },
          {
            "name": "USN-3933-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-2/"
          },
          {
            "name": "USN-3933-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3933-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-01-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-08T19:06:06",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1123706"
        },
        {
          "name": "106802",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106802"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b"
        },
        {
          "name": "USN-3933-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-2/"
        },
        {
          "name": "USN-3933-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3933-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1123706",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1123706"
            },
            {
              "name": "106802",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106802"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e58780309613a578fe1ee90b"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/6aeb75e6adfaed16e58780309613a578fe1ee90b"
            },
            {
              "name": "USN-3933-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-2/"
            },
            {
              "name": "USN-3933-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3933-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18360",
    "datePublished": "2019-01-31T09:00:00",
    "dateReserved": "2019-01-31T00:00:00",
    "dateUpdated": "2024-08-05T21:20:50.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18232

Vulnerability from cvelistv5

Published

2018-03-15 04:00

Modified

2024-08-05 21:13

Severity ?

Summary

The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/103423	vdb-entry, x_refsource_BID
	https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/4163-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/4163-2/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:13:49.098Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "103423",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103423"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-4163-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4163-1/"
          },
          {
            "name": "USN-4163-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4163-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-23T05:06:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "103423",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103423"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-4163-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4163-1/"
        },
        {
          "name": "USN-4163-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4163-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18232",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "103423",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103423"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-4163-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4163-1/"
            },
            {
              "name": "USN-4163-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4163-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18232",
    "datePublished": "2018-03-15T04:00:00",
    "dateReserved": "2018-03-14T00:00:00",
    "dateUpdated": "2024-08-05T21:13:49.098Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1118

Vulnerability from cvelistv5

Published

2018-05-10 22:00

Modified

2024-08-05 03:51

Severity ?

2.3 (Low) - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Summary

Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3762-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3762-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1118	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	kernel	vhost

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.923Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3762-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3762-1/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3762-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3762-2/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1118"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vhost",
          "vendor": "kernel",
          "versions": [
            {
              "status": "affected",
              "version": "since 4.8"
            }
          ]
        }
      ],
      "datePublic": "2018-05-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-665",
              "description": "CWE-665",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3762-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3762-1/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3762-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3762-2/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1118"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1118",
    "datePublished": "2018-05-10T22:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.923Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-1094

Vulnerability from cvelistv5

Published

2018-04-02 03:00

Modified

2024-08-05 03:51

Severity ?

Summary

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1560788	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=18db4b4e6fc31eda838dd1c1296d67dbcb3dc957	x_refsource_MISC
	http://openwall.com/lists/oss-security/2018/03/29/1	x_refsource_MISC
	https://usn.ubuntu.com/3695-1/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=a45403b51582a87872927a3e0fc0a389c26867f1	x_refsource_MISC
	https://usn.ubuntu.com/3695-2/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=199183	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	Linux kernel through version 4.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560788"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=18db4b4e6fc31eda838dd1c1296d67dbcb3dc957"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/03/29/1"
          },
          {
            "name": "USN-3695-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3695-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=a45403b51582a87872927a3e0fc0a389c26867f1"
          },
          {
            "name": "USN-3695-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3695-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199183"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux kernel through version 4.15",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel through version 4.15"
            }
          ]
        }
      ],
      "datePublic": "2018-04-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "NULL pointer dereference",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1560788"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=18db4b4e6fc31eda838dd1c1296d67dbcb3dc957"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/03/29/1"
        },
        {
          "name": "USN-3695-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3695-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=a45403b51582a87872927a3e0fc0a389c26867f1"
        },
        {
          "name": "USN-3695-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3695-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199183"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1094",
    "datePublished": "2018-04-02T03:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-10661

Vulnerability from cvelistv5

Published

2017-08-19 18:00

Modified

2024-08-05 17:41

Severity ?

Summary

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100215	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1481136	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3981	vendor-advisory, x_refsource_DEBIAN
	https://source.android.com/security/bulletin/2017-08-01	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/43345/	exploit, x_refsource_EXPLOIT-DB
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4058	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4057	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:41:55.518Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "100215",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100215"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15"
          },
          {
            "name": "DSA-3981",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3981"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2017-08-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6"
          },
          {
            "name": "43345",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/43345/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "RHSA-2019:4058",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4058"
          },
          {
            "name": "RHSA-2019:4057",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4057"
          },
          {
            "name": "RHSA-2020:0036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0036"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-05-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-07T15:06:04",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "100215",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100215"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15"
        },
        {
          "name": "DSA-3981",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3981"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2017-08-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6"
        },
        {
          "name": "43345",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/43345/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "RHSA-2019:4058",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4058"
        },
        {
          "name": "RHSA-2019:4057",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4057"
        },
        {
          "name": "RHSA-2020:0036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0036"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-10661",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "100215",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100215"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1481136"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15"
            },
            {
              "name": "DSA-3981",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3981"
            },
            {
              "name": "https://source.android.com/security/bulletin/2017-08-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2017-08-01"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6"
            },
            {
              "name": "43345",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/43345/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "RHSA-2019:4058",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4058"
            },
            {
              "name": "RHSA-2019:4057",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4057"
            },
            {
              "name": "RHSA-2020:0036",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0036"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-10661",
    "datePublished": "2017-08-19T18:00:00",
    "dateReserved": "2017-06-28T00:00:00",
    "dateUpdated": "2024-08-05T17:41:55.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-18344

Vulnerability from cvelistv5

Published

2018-07-26 19:00

Modified

2024-08-05 21:20

Severity ?

Summary

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3540	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3591	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3459	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041414	vdb-entry, x_refsource_SECTRACK
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3590	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe	x_refsource_MISC
	https://usn.ubuntu.com/3742-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/104909	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3742-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3586	vendor-advisory, x_refsource_REDHAT
	https://www.exploit-db.com/exploits/45175/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:20:50.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3540",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3540"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "RHSA-2018:3591",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3591"
          },
          {
            "name": "RHSA-2018:3459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3459"
          },
          {
            "name": "1041414",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041414"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
          },
          {
            "name": "RHSA-2018:3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3590"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "104909",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104909"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:3586",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3586"
          },
          {
            "name": "45175",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45175/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn\u0027t properly validate the sigevent-\u003esigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-14T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3540",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3540"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "RHSA-2018:3591",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3591"
        },
        {
          "name": "RHSA-2018:3459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3459"
        },
        {
          "name": "1041414",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041414"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
        },
        {
          "name": "RHSA-2018:3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3590"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "104909",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104909"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:3586",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3586"
        },
        {
          "name": "45175",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45175/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18344",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn\u0027t properly validate the sigevent-\u003esigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3540",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3540"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "RHSA-2018:3591",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3591"
            },
            {
              "name": "RHSA-2018:3459",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3459"
            },
            {
              "name": "1041414",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041414"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8"
            },
            {
              "name": "RHSA-2018:3590",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3590"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "104909",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104909"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:3586",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3586"
            },
            {
              "name": "45175",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45175/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18344",
    "datePublished": "2018-07-26T19:00:00",
    "dateReserved": "2018-07-26T00:00:00",
    "dateUpdated": "2024-08-05T21:20:50.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10879

Vulnerability from cvelistv5

Published

2018-07-26 18:00

Modified

2024-08-05 07:46

Severity ?

4.2 (Medium) - CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-5/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-4/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/104902	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10879	x_refsource_CONFIRM
	http://patchwork.ozlabs.org/patch/928666/	x_refsource_CONFIRM
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5369a762c882c0b6e9599e4ebbb3a9ba9eee7e2d	x_refsource_CONFIRM
	https://usn.ubuntu.com/3871-1/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=513f86d73855ce556ea9522b6bfd79f87356dc3a	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3871-3/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.kernel.org/show_bug.cgi?id=200001	x_refsource_CONFIRM
	http://patchwork.ozlabs.org/patch/928667/	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:46:46.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3753-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-2/"
          },
          {
            "name": "USN-3871-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-5/"
          },
          {
            "name": "USN-3871-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-4/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "104902",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10879"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/928666/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5369a762c882c0b6e9599e4ebbb3a9ba9eee7e2d"
          },
          {
            "name": "USN-3871-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=513f86d73855ce556ea9522b6bfd79f87356dc3a"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-1/"
          },
          {
            "name": "USN-3871-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-3/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/928667/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-09T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3753-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-2/"
        },
        {
          "name": "USN-3871-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-5/"
        },
        {
          "name": "USN-3871-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-4/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "104902",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10879"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/928666/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5369a762c882c0b6e9599e4ebbb3a9ba9eee7e2d"
        },
        {
          "name": "USN-3871-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=513f86d73855ce556ea9522b6bfd79f87356dc3a"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-1/"
        },
        {
          "name": "USN-3871-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-3/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/928667/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10879",
    "datePublished": "2018-07-26T18:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:46:46.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5803

Vulnerability from cvelistv5

Published

2018-06-12 16:00

Modified

2024-08-05 05:47

Severity ?

Summary

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

References

▼	URL	Tags
	https://secuniaresearch.flexerasoftware.com/advisories/81331/	third-party-advisory, x_refsource_SECUNIA
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3654-1/	vendor-advisory, x_refsource_UBUNTU
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:1854	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3697-1/	vendor-advisory, x_refsource_UBUNTU
	https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://www.spinics.net/lists/netdev/msg482523.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3697-2/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c	x_refsource_CONFIRM
	https://www.spinics.net/lists/linux-sctp/msg07036.html	mailing-list, x_refsource_MLIST
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87	x_refsource_CONFIRM
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8	x_refsource_CONFIRM
	https://usn.ubuntu.com/3654-2/	vendor-advisory, x_refsource_UBUNTU
	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121	x_refsource_CONFIRM
	https://usn.ubuntu.com/3698-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3656-1/	vendor-advisory, x_refsource_UBUNTU
	https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3698-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2019:0641	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Linux Foundation	Linux Kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:47:55.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "81331",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "https://secuniaresearch.flexerasoftware.com/advisories/81331/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3654-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51"
          },
          {
            "name": "RHSA-2018:1854",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1854"
          },
          {
            "name": "USN-3697-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "[netdev] 20180207 [Secunia Research] Linux Kernel Vulnerability - Sending information",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/netdev/msg482523.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3697-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3697-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c"
          },
          {
            "name": "[linux-sctp] 20180209 skb_over_panic on INIT/INIT_ACK packet sending",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://www.spinics.net/lists/linux-sctp/msg07036.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8"
          },
          {
            "name": "USN-3654-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3654-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121"
          },
          {
            "name": "USN-3698-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-1/"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "USN-3656-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3656-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3698-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3698-2/"
          },
          {
            "name": "RHSA-2019:0641",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0641"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "Before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102."
            }
          ]
        }
      ],
      "datePublic": "2018-02-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the \"_sctp_make_chunk()\" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-26T10:06:07",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "81331",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "https://secuniaresearch.flexerasoftware.com/advisories/81331/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3654-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51"
        },
        {
          "name": "RHSA-2018:1854",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1854"
        },
        {
          "name": "USN-3697-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "[netdev] 20180207 [Secunia Research] Linux Kernel Vulnerability - Sending information",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://www.spinics.net/lists/netdev/msg482523.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3697-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3697-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c"
        },
        {
          "name": "[linux-sctp] 20180209 skb_over_panic on INIT/INIT_ACK packet sending",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://www.spinics.net/lists/linux-sctp/msg07036.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8"
        },
        {
          "name": "USN-3654-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3654-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121"
        },
        {
          "name": "USN-3698-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-1/"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "USN-3656-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3656-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3698-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3698-2/"
        },
        {
          "name": "RHSA-2019:0641",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0641"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2018-5803",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux Foundation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the \"_sctp_make_chunk()\" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "81331",
              "refsource": "SECUNIA",
              "url": "https://secuniaresearch.flexerasoftware.com/advisories/81331/"
            },
            {
              "name": "RHSA-2018:3083",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3083"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3654-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-1/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51"
            },
            {
              "name": "RHSA-2018:1854",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1854"
            },
            {
              "name": "USN-3697-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-1/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "[netdev] 20180207 [Secunia Research] Linux Kernel Vulnerability - Sending information",
              "refsource": "MLIST",
              "url": "https://www.spinics.net/lists/netdev/msg482523.html"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3697-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3697-2/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c"
            },
            {
              "name": "[linux-sctp] 20180209 skb_over_panic on INIT/INIT_ACK packet sending",
              "refsource": "MLIST",
              "url": "https://www.spinics.net/lists/linux-sctp/msg07036.html"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8"
            },
            {
              "name": "USN-3654-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3654-2/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121"
            },
            {
              "name": "USN-3698-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-1/"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "USN-3656-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3656-1/"
            },
            {
              "name": "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/",
              "refsource": "MISC",
              "url": "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/"
            },
            {
              "name": "RHSA-2018:3096",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3096"
            },
            {
              "name": "USN-3698-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3698-2/"
            },
            {
              "name": "RHSA-2019:0641",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0641"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2018-5803",
    "datePublished": "2018-06-12T16:00:00",
    "dateReserved": "2018-01-19T00:00:00",
    "dateUpdated": "2024-08-05T05:47:55.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-10881

Vulnerability from cvelistv5

Published

2018-07-26 18:00

Modified

2024-08-05 07:54

Severity ?

4.2 (Medium) - CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

References

▼	URL	Tags
	https://usn.ubuntu.com/3752-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3083	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3752-3/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10881	x_refsource_CONFIRM
	http://patchwork.ozlabs.org/patch/929792/	x_refsource_CONFIRM
	https://usn.ubuntu.com/3753-2/	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6e8ab72a812396996035a37e5ca4b3b99b5d214b	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104901	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3754-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.kernel.org/show_bug.cgi?id=200015	x_refsource_CONFIRM
	https://usn.ubuntu.com/3752-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3096	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3753-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	[UNKNOWN]	kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:34.835Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3752-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-2/"
          },
          {
            "name": "RHSA-2018:3083",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3083"
          },
          {
            "name": "USN-3752-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-3/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/929792/"
          },
          {
            "name": "USN-3753-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6e8ab72a812396996035a37e5ca4b3b99b5d214b"
          },
          {
            "name": "104901",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104901"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200015"
          },
          {
            "name": "USN-3752-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-1/"
          },
          {
            "name": "RHSA-2018:3096",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3096"
          },
          {
            "name": "USN-3753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3752-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-2/"
        },
        {
          "name": "RHSA-2018:3083",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3083"
        },
        {
          "name": "USN-3752-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-3/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/929792/"
        },
        {
          "name": "USN-3753-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6e8ab72a812396996035a37e5ca4b3b99b5d214b"
        },
        {
          "name": "104901",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104901"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200015"
        },
        {
          "name": "USN-3752-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-1/"
        },
        {
          "name": "RHSA-2018:3096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3096"
        },
        {
          "name": "USN-3753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-1/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10881",
    "datePublished": "2018-07-26T18:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:34.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags