CVE-2018-14625mediumCWE-416

CVE-2018-14625: falha de média gravidade em [UNKNOWN] kernel

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar linux

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Produtos afetados
[UNKNOWN] · kernel
CVEs relacionadas — [UNKNOWN] kernel

No mesmo produto, das mais perigosas para as menos.

CVE-2018-1120LOWCVE-2018-1120EPSS 7.1%CVE-2018-10880MEDIUMCVE-2018-10880EPSS 2.9%CVE-2018-10877HIGHCVE-2018-10877EPSS 2.2%CVE-2018-10879MEDIUMCVE-2018-10879EPSS 0.9%CVE-2018-10876MEDIUMCVE-2018-10876EPSS 0.8%CVE-2018-10881MEDIUMCVE-2018-10881EPSS 0.8%