Vulnerability CVE-2018-10877: Information

Description

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2018-10877
Published: July 18, 2018
Modified: Feb. 13, 2023
Error type identifier: CWE-125

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-std-defsisyphus4.14.55-alt16.1.91-alt1ALT-PU-2018-2002-1209815Fixed
kernel-image-std-defp104.14.55-alt15.10.216-alt1ALT-PU-2018-2002-1209815Fixed
kernel-image-std-defp94.14.55-alt15.4.275-alt1ALT-PU-2018-2002-1209815Fixed
kernel-image-std-defp84.9.112-alt0.M80P.14.9.337-alt0.M80P.1ALT-PU-2018-2019-1209820Fixed
kernel-image-std-defc9f24.14.55-alt15.10.214-alt0.c9f.2ALT-PU-2018-2002-1209815Fixed
kernel-image-std-defc74.4.143-alt0.M70C.14.4.277-alt0.M70C.1ALT-PU-2018-2130-1211180Fixed
kernel-image-std-paep84.4.140-alt0.M80P.14.4.159-alt0.M80P.1ALT-PU-2018-2023-1209821Fixed
kernel-image-std-paec9f24.4.140-alt14.19.72-alt1ALT-PU-2018-2001-1209819Fixed
kernel-image-un-defsisyphus4.17.6-alt16.6.31-alt1ALT-PU-2018-2003-1209817Fixed
kernel-image-un-defp104.17.6-alt16.1.85-alt1ALT-PU-2018-2003-1209817Fixed
kernel-image-un-defp94.17.6-alt15.10.216-alt2ALT-PU-2018-2003-1209817Fixed
kernel-image-un-defp84.14.55-alt0.M80P.14.19.310-alt0.M80P.1ALT-PU-2018-2020-1209818Fixed
kernel-image-un-defc10f14.17.6-alt16.1.85-alt0.c10f.1ALT-PU-2018-2003-1209817Fixed
kernel-image-un-defc9f24.17.6-alt15.10.29-alt2ALT-PU-2018-2003-1209817Fixed
kernel-image-un-defc74.9.277-alt0.M70C.14.9.277-alt0.M70C.1ALT-PU-2021-3032-1281292Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10877
  • Issue Tracking
  • Patch
  • Vendor Advisory
[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package
  • Mailing List
  • Third Party Advisory
USN-3754-1
  • Third Party Advisory
USN-3753-2
  • Third Party Advisory
USN-3753-1
  • Third Party Advisory
RHSA-2018:2948
  • Third Party Advisory
106503
  • Third Party Advisory
  • VDB Entry
USN-3871-1
  • Third Party Advisory
USN-3871-4
  • Third Party Advisory
USN-3871-3
  • Third Party Advisory
USN-3871-5
  • Third Party Advisory
104878

      1. Configuration 1

        cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
        cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

        Configuration 2

        cpe:2.3:o:linux:linux_kernel:4.16:*:*:*:*:*:*:*
        cpe:2.3:o:linux:linux_kernel:4.17:*:*:*:*:*:*:*

        Configuration 3

        cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

        Configuration 4

        cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.1
    Back to top