Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
References: - https://www.debian.org/security/2018/dsa-4271 - https://access.redhat.com/errata/RHSA-2018:2613 - https://www.samba.org/samba/security/CVE-2018-10858.html - https://usn.ubuntu.com/3738-1/ - https://access.redhat.com/errata/RHSA-2018:2612 - http://www.securityfocus.com/bid/105085 - http://www.securitytracker.com/id/1042002 - https://access.redhat.com/errata/RHSA-2018:3056 - https://security.netapp.com/advisory/ntap-20180814-0001/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10858 - https://access.redhat.com/errata/RHSA-2018:3470 - https://kc.mcafee.com/corporate/index?page=content&id=SB10284 - https://security.gentoo.org/glsa/202003-52
CVE ID: CVE-2018-10859 State: PUBLISHED Published: 2018-07-16T18:00:00 Last Updated: 2024-08-05T07:46:47.345Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: git-annex Problem Types: CWE-200 Description: git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key. This attack could be used to expose encrypted data that was never stored in git-annex Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00004.html - https://bugzilla.redh
gram Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10859
CVE ID: CVE-2018-10860 State: PUBLISHED Published: 2018-06-29T19:00:00 Last Updated: 2024-08-05T07:46:47.302Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: [UNKNOWN] Products: perl-archive-zip Problem Types: CWE-22 Description: perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com
xt of the perl interpreter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10860 - https://lists.debian.org/debian-lts-announce/2018/07/msg00032.html - https://usn.ubuntu.com/3703-2/ - http://www.securityfocus.com/bid/104580 - https://www.debian.org/security/2018/dsa-4300 - https://usn.ubuntu.com/3703-1/
CVE ID: CVE-2018-10861 State: PUBLISHED Published: 2018-07-10T14:00:00Z Last Updated: 2024-09-16T16:28:46.914Z Vendors: Red Hat, Inc. Products: ceph Problem Types: CWE-285 Description: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2261 - https://access.redhat.com/errata/RHSA-2018:2177 - https://access.redhat.com/errata/RHSA-2018:2179 - https://access.redhat.com/errata/RHSA-201
.com/errata/RHSA-2018:2177 - https://access.redhat.com/errata/RHSA-2018:2179 - https://access.redhat.com/errata/RHSA-2018:2274 - http://www.securityfocus.com/bid/104742 - https://bugzilla.redhat.com/show_bug.cgi?id=1593308 - https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc - https://www.debian.org/security/2018/dsa-4339 - http://tracker.ceph.com/issues/24838 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html
CVE ID: CVE-2018-10862 State: PUBLISHED Published: 2018-07-27T14:00:00 Last Updated: 2024-08-05T07:46:47.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/research/zip-slip-vulnerability - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10862 - https://access.redhat.com/errata/RHSA-2018:2428 - https://access.redhat.com/errata/RHSA-2018:2643 - https://access.redhat.
tps://access.redhat.com/errata/RHSA-2018:2428 - https://access.redhat.com/errata/RHSA-2018:2643 - https://access.redhat.com/errata/RHSA-2018:2279 - https://access.redhat.com/errata/RHSA-2018:2424 - https://access.redhat.com/errata/RHSA-2018:2276 - https://access.redhat.com/errata/RHSA-2018:2423 - https://access.redhat.com/errata/RHSA-2018:2425 - https://access.redhat.com/errata/RHSA-2018:2277 - https://access.redhat.com/errata/RHSA-2019:0877
CVE ID: CVE-2018-10863 State: PUBLISHED Published: 2021-05-26T18:03:06 Last Updated: 2024-08-05T07:46:47.062Z Vendors: n/a Products: redhat-certification Problem Types: CWE-552 Description: It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1594122 - https://access.redhat.com/security/cve/CVE-2018-10863
CVE ID: CVE-2018-10864 State: PUBLISHED Published: 2018-08-13T17:00:00 Last Updated: 2024-08-05T07:46:46.942Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: [UNKNOWN] Products: redhat-certification: Problem Types: CWE-400 Description: An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10864 - https://access.redhat.com/errata/RHSA-2018
r: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10864 - https://access.redhat.com/errata/RHSA-2018:2373
CVE ID: CVE-2018-10865 State: PUBLISHED Published: 2021-05-26T18:03:11 Last Updated: 2024-08-05T07:46:47.462Z Vendors: n/a Products: redhat-certification Problem Types: CWE-862 Description: It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system, even if not belonging to him. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1593631 - https://access.redhat.com/security/cve/CVE-2018-10865
CVE ID: CVE-2018-10866 State: PUBLISHED Published: 2021-05-26T18:03:16 Last Updated: 2024-08-05T07:46:47.477Z Vendors: n/a Products: redhat-certification Problem Types: CWE-862 Description: It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1593632 - https://access.redhat.com/security/cve/CVE-2018-10866
CVE ID: CVE-2018-10867 State: PUBLISHED Published: 2021-05-26T18:03:20 Last Updated: 2024-08-05T07:46:47.328Z Vendors: n/a Products: redhat-certification Problem Types: CWE-552 Description: Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1593764 - https://access.redhat.com/security/cve/CVE-2018-10867
CVE ID: CVE-2018-10868 State: PUBLISHED Published: 2021-05-26T18:03:25 Last Updated: 2024-08-05T07:46:47.017Z Vendors: n/a Products: redhat-certification Problem Types: CWE-400 Description: redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh Attack" by replying to XMLRPC methods when getting the status of an host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1593776 - https://access.redhat.com/security/cve/CVE-2018-10868
CVE ID: CVE-2018-10869 State: PUBLISHED Published: 2018-07-19T22:00:00 Last Updated: 2024-08-05T07:46:47.477Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: redhat-certification Problem Types: CWE-552 Description: redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105061 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10869 - https://access.redhat.com/errata/RHSA-2018:2373
CVE ID: CVE-2018-10870 State: PUBLISHED Published: 2018-07-19T22:00:00 Last Updated: 2024-08-05T07:46:47.511Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: redhat-certification Products: rhcertstore.py Problem Types: CWE-22 Description: redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10870 - https://access.redhat.com/errata/RHSA-2018:2373 - http://www.securityfocus.com/bid/104857
CVE ID: CVE-2018-10871 State: PUBLISHED Published: 2018-07-18T13:00:00 Last Updated: 2024-08-05T07:46:47.376Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: 389-ds-base Problem Types: CWE-312 Description: 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently high privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext passwords. Additional Analyst Notes: - CV
oot or Directory Manager, can query these files in order to retrieve plaintext passwords. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10871 - https://pagure.io/389-ds-base/issue/49789 - https://lists.debian.org/debian-lts-announce/2018/08/msg00032.html - https://access.redhat.com/errata/RHSA-2019:3401
CVE ID: CVE-2018-10872 State: PUBLISHED Published: 2018-07-10T19:00:00 Last Updated: 2024-08-05T07:46:47.310Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Linux Products: kernel Problem Types: CWE-250 Description: A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regre
stem user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2164 - https://www.oracle.com/security-alerts/cpujul2020.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10872
CVE ID: CVE-2018-10873 State: PUBLISHED Published: 2018-08-17T12:00:00 Last Updated: 2024-08-05T07:46:47.325Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: [UNKNOWN] Products: spice: Problem Types: CWE-119 Description: A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4319 - https://lists.debi
Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4319 - https://lists.debian.org/debian-lts-announce/2018/08/msg00035.html - https://usn.ubuntu.com/3751-1/ - https://access.redhat.com/errata/RHSA-2018:2732 - https://lists.debian.org/debian-lts-announce/2018/08/msg00037.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10873 - https://access.redhat.com/errata/RHSA-2018:2731 - https://access.redhat.com/errata/RHSA-2018:3470 - https://lists.debian.org/debian-lts-announce/2018/08/msg00038.html - http://www.securityfocus.com/bid/105152 - https://gitlab.freedesktop.org/spice/spice-common/commit/bb15d4815ab586b4c4a20f4a565970a44824c42c
CVE ID: CVE-2018-10874 State: PUBLISHED Published: 2018-07-02T13:00:00 Last Updated: 2024-08-05T07:46:47.224Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: ansible Problem Types: CWE-426 Description: In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2166 - https://access.redhat.com/errata/RHSA-2018:2152 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874 - https://access.redhat
ss.redhat.com/errata/RHSA-2018:2152 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874 - https://access.redhat.com/errata/RHSA-2018:2150 - http://www.securitytracker.com/id/1041396 - https://access.redhat.com/errata/RHBA-2018:3788 - https://access.redhat.com/errata/RHSA-2019:0054 - https://access.redhat.com/errata/RHSA-2018:2151 - https://access.redhat.com/errata/RHSA-2018:2321 - https://access.redhat.com/errata/RHSA-2018:2585 - https://usn.ubuntu.com/4072-1/
CVE ID: CVE-2018-10875 State: PUBLISHED Published: 2018-07-13T22:00:00 Last Updated: 2024-08-05T07:46:47.518Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: ansible Problem Types: CWE-426 Description: A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2166 - https://access.redhat.com/errata/RHSA-2018:2152 - https://access.redhat.com/errata/RHSA-2018
com/errata/RHSA-2018:2166 - https://access.redhat.com/errata/RHSA-2018:2152 - https://access.redhat.com/errata/RHSA-2018:2150 - http://www.securitytracker.com/id/1041396 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875 - https://access.redhat.com/errata/RHBA-2018:3788 - https://access.redhat.com/errata/RHSA-2019:0054 - https://access.redhat.com/errata/RHSA-2018:2151 - https://access.redhat.com/errata/RHSA-2018:2321 - https://access.redhat.com/errata/RHSA-2018:2585 - https://www.debian.org/security/2019/dsa-4396 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html - https://usn.ubuntu.com/4072-1/ - https://lists.debian.org/debian-lts-announce/2019/09/msg000
nce/2019-04/msg00021.html - https://usn.ubuntu.com/4072-1/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
CVE ID: CVE-2018-10876 State: PUBLISHED Published: 2018-07-26T18:00:00 Last Updated: 2024-08-05T07:46:47.413Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-416 Description: A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image. Additional Analyst Notes: - CVE Program Container: References: - http://patchwork.ozlabs.org/patch/929239/ - https://usn.ubuntu.com/3753-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8844618d8aa7a9973e7b527d038a2a589665002c - https:/
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8844618d8aa7a9973e7b527d038a2a589665002c - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10876 - https://usn.ubuntu.com/3871-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=199403 - https://access.redhat.com/errata/RHSA-2019:0525 - http://www.securityfocus.com/bid/106503 - https://usn.ubuntu.com/3753-1/ - https://usn.ubuntu.com/3871-3/ - http://www.securityfocus.com/bid/104904
CVE ID: CVE-2018-10877 State: PUBLISHED Published: 2018-07-18T15:00:00 Last Updated: 2024-08-05T07:46:47.469Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-125 Description: Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10877 - https://usn.ubuntu.com/3753-2/ - https://usn.ubuntu.com/3754-1/ - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-
.ubuntu.com/3754-1/ - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://access.redhat.com/errata/RHSA-2018:2948 - https://usn.ubuntu.com/3871-1/ - http://www.securityfocus.com/bid/106503 - https://usn.ubuntu.com/3753-1/ - https://usn.ubuntu.com/3871-3/ - http://www.securityfocus.com/bid/104878
CVE ID: CVE-2018-10878 State: PUBLISHED Published: 2018-07-26T18:00:00 Last Updated: 2024-08-05T07:46:47.494Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-787 Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://usn.ubuntu.com/3753-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10878 - https://git
SA-2018:3083 - https://usn.ubuntu.com/3753-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10878 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=77260807d1170a8cf35dbb06e07461a655f67eee - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://access.redhat.com/errata/RHSA-2018:2948 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=819b23f1c501b17b9694325471789e6b5cc2d0d2 - http://patchwork.ozlabs.org/patch/929238/ - http://patchwork.ozlabs.org/patch/929237/ - https://usn.ubuntu.com/3871-1/ - https://bugzilla.kernel.org/show_bug.cgi?id
http://patchwork.ozlabs.org/patch/929237/ - https://usn.ubuntu.com/3871-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=199865 - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3753-1/ - https://usn.ubuntu.com/3871-3/
CVE ID: CVE-2018-10879 State: PUBLISHED Published: 2018-07-26T18:00:00 Last Updated: 2024-08-05T07:46:46.964Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://usn.ubuntu.com/3753-2/ - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu
.redhat.com/errata/RHSA-2018:3083 - https://usn.ubuntu.com/3753-2/ - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://access.redhat.com/errata/RHSA-2018:2948 - http://www.securityfocus.com/bid/104902 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10879 - http://patchwork.ozlabs.org/patch/928666/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5369a762c882c0b6e9599e4ebbb3a9ba9eee7e2d - https://usn.ubuntu.com/3871-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=513f86d73855ce556ea9522b6bfd79f87356dc3a - https://access.redhat.co
b/scm/linux/kernel/git/torvalds/linux.git/commit/?id=513f86d73855ce556ea9522b6bfd79f87356dc3a - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3753-1/ - https://usn.ubuntu.com/3871-3/ - https://bugzilla.kernel.org/show_bug.cgi?id=200001 - http://patchwork.ozlabs.org/patch/928667/
CVE ID: CVE-2018-10880 State: PUBLISHED Published: 2018-07-25T13:00:00 Last Updated: 2024-08-05T07:54:34.830Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-787 Description: Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3821-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10880 - https://usn.ubuntu.com/3871-5/ - https://usn
.com/3821-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10880 - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://access.redhat.com/errata/RHSA-2018:2948 - https://usn.ubuntu.com/3821-2/ - http://patchwork.ozlabs.org/patch/930639/ - https://usn.ubuntu.com/3871-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8cdb5240ec5928b20490a2bb34cb87e9a5f40226 - https://bugzilla.kernel.org/show_bug.cgi?id=200005 - http://www.securityfocus.com/bid/106503 - https://usn.ubuntu.com/3871-3/ - http://www.securityfocus.com/bid/104907
CVE ID: CVE-2018-10881 State: PUBLISHED Published: 2018-07-26T18:00:00 Last Updated: 2024-08-05T07:54:34.835Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-787 Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://access.redhat.com/errata/RHSA-2018:3083 - https://usn.ubuntu.com/3752-3/ - https://bugzilla.redhat.com