ZeroHour

CVE-2018-10880

PoC ×2
CVSS 3.0
5.5 medium
EPSS
3%p86
Published
()
Modified
Description

Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.

Vendors
debianlinuxredhatcanonical
Products
debian linux, linux kernel, enterprise linux, ubuntu linux
Weakness
CWE-787
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.