CVE-2018-14619mediumCWE-416

CVE-2018-14619: falha de média gravidade em [UNKNOWN] kernel

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar linux

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.2epss 0.4%
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
[UNKNOWN] · kernel
CVEs relacionadas — [UNKNOWN] kernel

No mesmo produto, das mais perigosas para as menos.

CVE-2018-1120LOWCVE-2018-1120EPSS 7.1%CVE-2018-10880MEDIUMCVE-2018-10880EPSS 2.9%CVE-2018-10877HIGHCVE-2018-10877EPSS 2.2%CVE-2018-10879MEDIUMCVE-2018-10879EPSS 0.9%CVE-2018-10876MEDIUMCVE-2018-10876EPSS 0.8%CVE-2018-10881MEDIUMCVE-2018-10881EPSS 0.8%