CVE-2018-6554: falha em Linux Kernel
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.
Produtos afetados
Linux Kernel · Linux KernelCVEs relacionadas — Linux Kernel
No mesmo produto, das mais perigosas para as menos.
CVE-2021-22543HIGHImproper memory handling in Linux KVMEPSS 0.7%CVE-2018-6555—CVE-2018-6555EPSS 0.5%CVE-2021-23133MEDIUMLinux Kernel sctp_destroy_sock race conditionEPSS 0.5%CVE-2022-2503MEDIUMLinux Kernel LoadPin bypass via dm-verity table reloadEPSS 0.4%CVE-2021-23134HIGHLinux kernel llcp_sock_bind/connect use-after-freeEPSS 0.4%CVE-2022-2327HIGHUse-after-free in io_uring ad work_flags in Linux KernelEPSS 0.3%
Referências
https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htmlhttps://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlhttps://usn.ubuntu.com/3775-1/https://usn.ubuntu.com/3775-2/https://usn.ubuntu.com/3776-1/https://usn.ubuntu.com/3776-2/https://usn.ubuntu.com/3777-1/https://usn.ubuntu.com/3777-2/https://usn.ubuntu.com/3777-3/https://www.debian.org/security/2018/dsa-4308https://www.spinics.net/lists/stable/msg255030.htmlhttps://www.spinics.net/lists/stable/msg255034.html