CVE-2018-18690
kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
En el kernel de Linux en versiones anteriores a la 4.17, un atacante local que sea capaz de establecer atributos en un sistema de archivos xfs podría hacer que este sistema de archivos no esté operativo hasta el siguiente montaje desencadenando una condición de error no marcada. Esto se debe a que xfs_attr_shortform_addname en fs/xfs/libxfs/xfs_attr.c gestiona de manera incorrecta las operaciones ATTR_REPLACE con la conversión de un attr de forma corta a forma larga.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-10-26 CVE Reserved
- 2018-10-26 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-391: Unchecked Error Condition
- CWE-754: Improper Check for Unusual or Exceptional Conditions
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/105753 | Third Party Advisory | |
| https://bugzilla.suse.com/show_bug.cgi?id=1105025 | Issue Tracking | |
| https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html | Mailing List |
|
| https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html | Mailing List |
|
| https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://bugzilla.kernel.org/show_bug.cgi?id=199119 | 2024-08-05 |
| URL | Date | SRC |
|---|---|---|
| https://usn.ubuntu.com/3847-1 | 2019-10-03 | |
| https://usn.ubuntu.com/3847-2 | 2019-10-03 | |
| https://usn.ubuntu.com/3847-3 | 2019-10-03 | |
| https://usn.ubuntu.com/3848-1 | 2019-10-03 | |
| https://usn.ubuntu.com/3848-2 | 2019-10-03 | |
| https://usn.ubuntu.com/3849-1 | 2019-10-03 | |
| https://usn.ubuntu.com/3849-2 | 2019-10-03 | |
| https://access.redhat.com/security/cve/CVE-2018-18690 | 2018-10-30 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1643988 | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | < 4.17 Search vendor "Linux" for product "Linux Kernel" and version " < 4.17" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04" | esm |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04" | lts |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||