[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-7273 -- linux-image

ID: oval:org.secpod.oval:def:2000225Date: (C)2019-04-22   (M)2021-06-02
Class: VULNERABILITYFamily: unix




In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.

Platform:
Debian 8.x
Debian 9.x
Product:
linux-image-4.9
linux-image-3.16
Reference:
CVE-2018-7273
CVE    1
CVE-2018-7273
CPE    4
cpe:/a:linux:linux_image:3.16
cpe:/a:linux:linux_image:4.9
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
...

© SecPod Technologies