UBUNTU-CVE-2018-10880
Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
02 / AFFECTED SOFTWARE
Affected packages
53 explicit affected versions
15 explicit affected versions
6 explicit affected versions
61 explicit affected versions
191 explicit affected versions
18 explicit affected versions
23 explicit affected versions
1 explicit affected versions
8 explicit affected versions
12 explicit affected versions
7 explicit affected versions
1 explicit affected versions
21 explicit affected versions
4 explicit affected versions
18 explicit affected versions
23 explicit affected versions
61 explicit affected versions
55 explicit affected versions
20 explicit affected versions
21 explicit affected versions
25 explicit affected versions
7 explicit affected versions
83 explicit affected versions
6 explicit affected versions
51 explicit affected versions
29 explicit affected versions
7 explicit affected versions
42 explicit affected versions
2 explicit affected versions
20 explicit affected versions
26 explicit affected versions
17 explicit affected versions
45 explicit affected versions
3 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
05 / REFERENCES
Further evidence
- https://bugzilla.kernel.org/show_bug.cgi?id=200005
- https://ubuntu.com/security/CVE-2018-10880
- https://ubuntu.com/security/notices/USN-3821-1
- https://ubuntu.com/security/notices/USN-3821-2
- https://ubuntu.com/security/notices/USN-3871-1
- https://ubuntu.com/security/notices/USN-3871-3
- https://ubuntu.com/security/notices/USN-3871-4
- https://ubuntu.com/security/notices/USN-3871-5
- https://www.cve.org/CVERecord?id=CVE-2018-10880