CVE-2018-10938
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.9%
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.
Produtos afetados
n/a · n/aReferências
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10938http://seclists.org/oss-sec/2018/q3/179https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=40413955ee265a5e42f710940ec78f5450d49149https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htmlhttps://usn.ubuntu.com/3797-1/https://usn.ubuntu.com/3797-2/https://www.debian.org/security/2018/dsa-4308http://www.securityfocus.com/bid/105154http://www.securitytracker.com/id/1041569