CVE-2018-10882

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2018-10882

Severity

5.5

Medium

CVSS CVSS_V3

Description

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.

References

https://images.chainguard.dev/security/CGA-pxvq-v355-pxh2
https://github.com/advisories/GHSA-pvv9-p2gj-w426
https://images.chainguard.dev/security/CGA-m4r6-8743-3w3f
https://images.chainguard.dev/security/CGA-q9v9-xqrw-wv3j
https://images.chainguard.dev/security/CGA-mf68-qp37-fv22
https://images.chainguard.dev/security/CGA-8wpq-3x3v-427x
https://images.chainguard.dev/security/CGA-9xhj-7mff-2m62
https://images.chainguard.dev/security/CGA-5mg2-7fc5-wp3c
http://www.securityfocus.com/bid/106503
https://access.redhat.com/errata/RHSA-2018:2948
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db
https://bugzilla.kernel.org/show_bug.cgi?id=200069
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
https://usn.ubuntu.com/3753-1/
https://usn.ubuntu.com/3753-2/
https://usn.ubuntu.com/3871-1/
https://usn.ubuntu.com/3871-3/
https://usn.ubuntu.com/3871-4/
https://usn.ubuntu.com/3871-5/
https://security-tracker.debian.org/tracker/CVE-2018-10882

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

CVE-2018-10882

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources