CVE-2018-16884

Published: Dic 18, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-8674 Aliases: GSD-2018-16884

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,5

Source: [email protected]

Attack Vector: adjacent_network

Attack Complexity: high

Privileges Required: low

User Interaction: none

Scope: changed

Confidentiality: none

Integrity: low

Availability: high

MEDIUM 6,7

Source: [email protected]

Access Vector: adjacent_network

Access Complexity: low

Authentication: single

Confidentiality: partial

Integrity: partial

Availability: complete

Description

AI Translation Available

A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0005

Percentile

0,2th

Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable

Abstraction: Variant Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Likelihood of Exploit: High

View CWE Details

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 3.19 (inclusive)

To 4.4.171 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux

Version 7.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 4.10 (inclusive)

To 4.14.94 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 3.17 (inclusive)

To 3.18.133 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 14.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 3.7 (inclusive)

To 3.16.65 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Debian Linux by Debian

Product Information

Vendor Debian

Product Debian Linux

Version 8.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Mrg by Redhat

Product Information

Vendor Redhat

Product Enterprise Mrg

Version 2.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 4.5 (inclusive)

To 4.9.151 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 4.15 (inclusive)

To 4.19.16 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 16.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

From 4.20 (inclusive)

To 4.20.3 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://access.redhat.com/errata/RHSA-2019:1873

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1873

https://access.redhat.com/errata/RHSA-2019:1891

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1891

https://access.redhat.com/errata/RHSA-2019:2696

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2696

https://access.redhat.com/errata/RHSA-2019:2730

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2730

https://access.redhat.com/errata/RHSA-2019:3309

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3309

https://access.redhat.com/errata/RHSA-2019:3517

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3517

https://access.redhat.com/errata/RHSA-2020:0204

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0204

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884

Issue Tracking Patch Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884

https://lists.debian.org/debian-lts-announce/2019/03/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://lists.debian.org/debian-lts-announce/2019/05/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://patchwork.kernel.org/cover/10733767/

Patch Vendor Advisory

https://patchwork.kernel.org/cover/10733767/

https://patchwork.kernel.org/patch/10733769/

Patch Vendor Advisory

https://patchwork.kernel.org/patch/10733769/

https://support.f5.com/csp/article/K21430012

Third Party Advisory

https://support.f5.com/csp/article/K21430012

https://usn.ubuntu.com/3932-1/

Third Party Advisory

https://usn.ubuntu.com/3932-1/

https://usn.ubuntu.com/3932-2/

Third Party Advisory

https://usn.ubuntu.com/3932-2/

https://usn.ubuntu.com/3980-1/

Third Party Advisory

https://usn.ubuntu.com/3980-1/

https://usn.ubuntu.com/3980-2/

Third Party Advisory

https://usn.ubuntu.com/3980-2/

https://usn.ubuntu.com/3981-1/

Third Party Advisory

https://usn.ubuntu.com/3981-1/

https://usn.ubuntu.com/3981-2/

Third Party Advisory

https://usn.ubuntu.com/3981-2/

https://www.oracle.com/security-alerts/cpuApr2021.html

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

http://www.securityfocus.com/bid/106253

Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/106253

https://access.redhat.com/errata/RHSA-2019:1873

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1873

https://access.redhat.com/errata/RHSA-2019:1891

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1891

https://access.redhat.com/errata/RHSA-2019:2696

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2696

https://access.redhat.com/errata/RHSA-2019:2730

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2730

https://access.redhat.com/errata/RHSA-2019:3309

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3309

https://access.redhat.com/errata/RHSA-2019:3517

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3517

https://access.redhat.com/errata/RHSA-2020:0204

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0204

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884

Issue Tracking Patch Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884

https://lists.debian.org/debian-lts-announce/2019/03/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://lists.debian.org/debian-lts-announce/2019/05/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://patchwork.kernel.org/cover/10733767/

Patch Vendor Advisory

https://patchwork.kernel.org/cover/10733767/

https://patchwork.kernel.org/patch/10733769/

Patch Vendor Advisory

https://patchwork.kernel.org/patch/10733769/

https://support.f5.com/csp/article/K21430012

Third Party Advisory

https://support.f5.com/csp/article/K21430012

https://usn.ubuntu.com/3932-1/

Third Party Advisory

https://usn.ubuntu.com/3932-1/

https://usn.ubuntu.com/3932-2/

Third Party Advisory

https://usn.ubuntu.com/3932-2/

https://usn.ubuntu.com/3980-1/

Third Party Advisory

https://usn.ubuntu.com/3980-1/

https://usn.ubuntu.com/3980-2/

Third Party Advisory

https://usn.ubuntu.com/3980-2/

https://usn.ubuntu.com/3981-1/

Third Party Advisory

https://usn.ubuntu.com/3981-1/

https://usn.ubuntu.com/3981-2/

Third Party Advisory

https://usn.ubuntu.com/3981-2/

https://www.oracle.com/security-alerts/cpuApr2021.html

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

http://www.securityfocus.com/bid/106253

Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/106253

CVE-2018-16884

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Use After Free

Common Consequences

Applicable Platforms

Linux Kernel by Linux

Product Information

Enterprise Linux by Redhat

Product Information

Linux Kernel by Linux

Product Information

Linux Kernel by Linux

Product Information

Ubuntu Linux by Canonical

Product Information

Linux Kernel by Linux

Product Information

Debian Linux by Debian

Product Information

Enterprise Mrg by Redhat

Product Information

Linux Kernel by Linux

Product Information

Linux Kernel by Linux

Product Information

Ubuntu Linux by Canonical

Product Information

Linux Kernel by Linux

Product Information

Iscriviti alla newsletter