ByteOS Network

NVD Vulnerability Details :

CVE-2018-1092

Modified

Source-secalert@redhat.com

Published At-02 Apr, 2018 | 03:29

Updated At-12 Feb, 2023 | 23:32

The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary	2.0	7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 4.15.15(inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://openwall.com/lists/oss-security/2018/03/29/1	secalert@redhat.com	Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2018:3083	secalert@redhat.com	N/A
https://access.redhat.com/errata/RHSA-2018:3096	secalert@redhat.com	N/A
https://bugzilla.kernel.org/show_bug.cgi?id=199179	secalert@redhat.com	Issue Tracking
https://bugzilla.kernel.org/show_bug.cgi?id=199275	secalert@redhat.com	Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1560777	secalert@redhat.com	Issue Tracking Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44	secalert@redhat.com	Patch
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	secalert@redhat.com	N/A
https://usn.ubuntu.com/3676-1/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3676-2/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3677-1/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3677-2/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3678-1/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3678-2/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3678-3/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3678-4/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3754-1/	secalert@redhat.com	N/A
https://www.debian.org/security/2018/dsa-4187	secalert@redhat.com	N/A
https://www.debian.org/security/2018/dsa-4188	secalert@redhat.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History